Android is a fast-growing and popular operating system among Smartphones and portable devices.Cyber attacks are on the rise against Android devices due to misuse of android applications resulting in the invasion of the victim’s privacy. One possible and appropriate way to avoid hacking of system and network penetration testing. Paper summarily describes penetration testing, Kali Linux tools such as Armitage and TheFatRat. These tools have proved to be effective in Android exploitation. By using TheFatRat, generate payload using msfvenom. It creates a backdoor to get access to the system, using the graphical user interface of Armitage, simply exploits the android device. Armitage is a Metasploit framework and finds any vulnerability on the target system then it will automatically hack that system.