mirror of
https://github.com/DarkSecDevelopers/HiddenEye-Legacy.git
synced 2024-03-22 21:12:55 +08:00
287 lines
8.5 KiB
Markdown
287 lines
8.5 KiB
Markdown
[]()
|
|
|
|
<p align="center">
|
|
<img src="logo.png">
|
|
</p>
|
|
|
|
<p align="center">
|
|
Modern Phishing Tool With Advanced Functionality
|
|
</p>
|
|
<p align="center">
|
|
PHISHING | KEYLOGGER | INFORMATION_COLLECTOR | ALL_IN_ONE_TOOL | SOCIALENGINEERING
|
|
</p>
|
|
|
|
<p align="center">
|
|
<a href="https://github.com/darksecdevelopers"><img title="Open Source Love" src="https://badges.frapsoft.com/os/v3/open-source.svg?v=102" ></a>
|
|
<a href="https://github.com/DarkSecDevelopers/HiddenEye/releases"><img title="GitHub version" src="https://d25lcipzij17d.cloudfront.net/badge.svg?id=gh&type=6&v=0.5.2&x2=0" ></a>
|
|
<a href="https://www.codetriage.com/darksecdevelopers/hiddeneye"><img title="Open Source Helpers" src="https://www.codetriage.com/darksecdevelopers/hiddeneye/badges/users.svg" ></a>
|
|
</p>
|
|
|
|
# DEVELOPERS & CONTRIBUTORS
|
|
|
|
1) ANONUD4Y (https://github.com/An0nUD4Y)
|
|
2) USAMA ABDUL SATTAR (https://github.com/usama7628674)
|
|
3) sTiKyt (https://github.com/sTiKyt)
|
|
4) UNDEADSEC (https://github.com/UndeadSec)
|
|
5) Micrafast (https://github.com/Micrafast)
|
|
6) Moltivie (https://github.com/Moltivie)
|
|
7) endbehavi0r (https://github.com/endbehavi0r)
|
|
8) George Joseph Hamilton (https://github.com/gjhami)
|
|
9) ___________ (WAITING FOR YOU)
|
|
|
|
# AVAILABLE TUNNELLING OPTIONS**
|
|
0) LOCALHOST
|
|
1) LOCALXPOSE (https://localxpose.io)
|
|
2) SERVEO (https://serveo.net/)
|
|
3) NGROK (https://ngrok.com/)
|
|
4) LOCALTUNNEL (Package Version) (https://localtunnel.me)
|
|
5) LOCALTUNNEL (Binary Version) (https://www.wa4e.com/downloads/)
|
|
6) OPENPORT (https://openport.io/)
|
|
7) PAGEKITE (https://pagekite.net/)
|
|
|
|
# SCREENSHOT (Android-Userland)
|
|
|
|
|
|
|
|
## CREDIT:-
|
|
* Anonud4y ( I don't remember if i have done Anything )
|
|
* Usama ( A Most active Developer)
|
|
* sTiKyt ( Guy Who recustomized everything )
|
|
* UNDEADSEC (For His wonderful repo socialfish which motivated us a lot)
|
|
* TheLinuxChoice ( For His Tools Phishing Pages )
|
|
|
|
### TESTED ON FOLLOWING:-
|
|
* **Kali Linux - Rolling Edition**
|
|
* **Parrot OS - Rolling Edition**
|
|
* **Linux Mint - 18.3 Sylvia**
|
|
* **Ubuntu - 16.04.3 LTS**
|
|
* **MacOS High Sierra**
|
|
* **Arch Linux**
|
|
* **Manjaro XFCE Edition 17.1.12**
|
|
* **Black Arch**
|
|
* **Userland App (For Android Users)**
|
|
* **Termux App (For Android Users)**
|
|
|
|
|
|
### PREREQUISITES ( Please verify if you have installed )
|
|
* Python 3
|
|
* PHP
|
|
* sudo
|
|
|
|
# FOUND A BUG ? / HAVE ANY ISSUE ? :- (Read This)
|
|
* Check closed & solved issues/bugs before opening new.
|
|
* Make sure your issue is related to the codes and resources of this repository.
|
|
* Its your responsibility to response on your opened issues.
|
|
* If we don't found user response on his/her issue in the particular time interval , Then we have to close that issue.
|
|
* Do Not Spam or Advertise & Respect Everyone.
|
|
|
|
### WHAT'S NEW FEATURES
|
|
**1) LIVE ATTACK**
|
|
- Now you will have live information about the victims such as : IP ADDRESS, Geolocation, ISP, Country, & many more.
|
|
|
|
**2) COMPATIBILITY**
|
|
- All the sites are mobile compatible.
|
|
|
|
**3) KEYLOGGER**
|
|
- Now you will also have the ability to capture all the keystokes of victim.
|
|
- You can now Deploy Keyloggers With (Y/N) option.
|
|
- Major issues fixed.
|
|
|
|
**4) ANDROID SUPPORT**
|
|
- We care about Android Users, So now we have came with two ways to run HiddenEye in Android Devices.
|
|
|
|
**(A) UserLand App**
|
|
- You Have to Download UserLand App. [Click Here](https://play.google.com/store/apps/details?id=tech.ula) To Download it.
|
|
- To read more how to set up userland app Read <a href="https://null-byte.wonderhowto.com/how-to/android-for-hackers-turn-android-phone-into-hacking-device-without-root-0189649/">HERE</a></p>
|
|
|
|
**(B) Termux App**
|
|
- You Have to Download Termux App. [Click Here](https://play.google.com/store/apps/details?id=com.termux) To Download it.
|
|
- For Further instruction [Check Instructions](https://github.com/DarkSecDevelopers/HiddenEye/blob/master/instructions.md)
|
|
- Termux Users Clone With This Command , Unless Errors may occur during Running.
|
|
```
|
|
git clone -b Termux-Support-Branch https://github.com/DarkSecDevelopers/HiddenEye.git
|
|
|
|
```
|
|
**5) NEW LOOK PROVIDED**
|
|
- NOW FOCUS EASILY ON TASKS...
|
|
- CUSTOMIZE APP WITH YOUR OWN THEMES
|
|
|
|
**6) SERVEO URL TYPE SELECTION AVAILABLE NOW**
|
|
- Major issues with serveo is fixed.
|
|
- Now You can choose out of CUSTOM URL and RANDOM URL.
|
|
|
|
**7) LARGE COLLECTION OF PHISHING PAGES ADDED**
|
|
- Pages are taken from various tool including ShellPhish , Blackeye , SocialFish .
|
|
|
|
**8) CAPTURED DATA BACKUP**
|
|
- Backup of Data can be Found At (Server/CapturedData).
|
|
|
|
**9) EMAIL SUPPORT ADDED**
|
|
- Captured Data can be Easily send to Any Email Address (Using Gmail SMTP).
|
|
- It Require User's Gmail Username And Password.
|
|
- GMAIL 2FA SHOULD BE DISABLED IN ORDER TO USE GMAIL SMTP.
|
|
- LESS SECURED APPS SHOULD BE TURNED ON (https://myaccount.google.com/lesssecureapps).
|
|
|
|
**10) CUSTOM TEMPLATES ADDED**
|
|
- Two Extra Custom Templates Added.
|
|
- Now Create Your Templates.
|
|
- Check Instructions At ( Webpages/CUSTOM/manual.txt )
|
|
|
|
## FOR FURTHER INSTALLATION PROCEDURE - [(CHECK INSTRUCTIONS)](https://github.com/DarkSecDevelopers/HiddenEye/blob/master/instructions.md)
|
|
|
|
## AVAILABLE PAGES
|
|
|
|
**1) Facebook:**
|
|
- Traditional Facebook login page.
|
|
- Advanced Poll Method.
|
|
- Fake Security login with Facebook Page.
|
|
- Facebook messenger login page.
|
|
|
|
**2) Google:**
|
|
- Traditional Google login page.
|
|
- Advanced Poll Method.
|
|
- New Google Page.
|
|
|
|
**3) LinkedIn:**
|
|
- Traditional LinkedIn login page.
|
|
|
|
**4) Github:**
|
|
- Traditional Github login page.
|
|
|
|
**5) Stackoverflow:**
|
|
- Traditional Stackoverflow login page.
|
|
|
|
**6) Wordpress:**
|
|
- Similar Wordpress login page.
|
|
|
|
**7) Twitter:**
|
|
- Traditional Twitter login page.
|
|
|
|
**8) Instagram:**
|
|
- Traditional Instagram login page.
|
|
- Instagram Autoliker Phishing Page.
|
|
- Instagram Profile Scenario Advanced attack.
|
|
- Instagram Badge Verify Attack *[New]*
|
|
- Instagram AutoFollower Phishing Page by (https://github.com/thelinuxchoice)
|
|
|
|
**9) SNAPCHAT PHISHING:**
|
|
- Traditional Snapchat Login Page
|
|
|
|
**10) YAHOO PHISHING:**
|
|
- Traditional Yahoo Login Page
|
|
|
|
**11) TWITCH PHISHING:**
|
|
- Traditional Twitch Login Page [ Login With Facebook Also Available ]
|
|
|
|
**12) MICROSOFT PHISHING:**
|
|
- Traditional Microsoft-Live Web Login Page
|
|
|
|
**13) STEAM PHISHING:**
|
|
- Traditional Steam Web Login Page
|
|
|
|
**14) VK PHISHING:**
|
|
- Traditional VK Web Login Page
|
|
- Advanced Poll Method
|
|
|
|
**15) ICLOUD PHISHING:**
|
|
- Traditional iCloud Web Login Page
|
|
|
|
**16) GitLab PHISHING:**
|
|
- Traditional GitLab Login Page
|
|
|
|
**17) NetFlix PHISHING:**
|
|
- Traditional Netflix Login Page
|
|
|
|
**18) Origin PHISHING:**
|
|
- Traditional Origin Login Page
|
|
|
|
**19) Pinterest PHISHING:**
|
|
- Traditional Pinterest Login Page
|
|
|
|
**20) Protonmail PHISHING:**
|
|
- Traditional Protonmail Login Page
|
|
|
|
**21) Spotify PHISHING:**
|
|
- Traditional Spotify Login Page
|
|
|
|
**22) Quora PHISHING:**
|
|
- Traditional Quora Login Page
|
|
|
|
**23) PornHub PHISHING:**
|
|
- Traditional PornHub Login Page
|
|
|
|
**24) Adobe PHISHING:**
|
|
- Traditional Adobe Login Page
|
|
|
|
**25) Badoo PHISHING:**
|
|
- Traditional Badoo Login Page
|
|
|
|
**26) CryptoCurrency PHISHING:**
|
|
- Traditional CryptoCurrency Login Page
|
|
|
|
**27) DevianArt PHISHING:**
|
|
- Traditional DevianArt Login Page
|
|
|
|
**28) DropBox PHISHING:**
|
|
- Traditional DropBox Login Page
|
|
|
|
**29) eBay PHISHING:**
|
|
- Traditional eBay Login Page
|
|
|
|
**30) MySpace PHISHING:**
|
|
- Traditional Myspace Login Page
|
|
|
|
**31) PayPal PHISHING:**
|
|
- Traditional PayPal Login Page
|
|
|
|
**32) Shopify PHISHING:**
|
|
- Traditional Shopify Login Page
|
|
|
|
**33) Verizon PHISHING:**
|
|
- Traditional Verizon Login Page
|
|
|
|
**34) Yandex PHISHING:**
|
|
- Traditional Yandex Login Page
|
|
|
|
**35) Reddit PHISHING:**
|
|
- Old Login Page
|
|
- New Login Page
|
|
|
|
**36) Subito.it PHISHING:**
|
|
- Traditional Subito.it Login Page
|
|
|
|
**37) PlayStation PHISHING:**
|
|
- Traditional PlayStation Login Page
|
|
|
|
**38) Xbox PHISHING:**
|
|
- Traditional Xbox Login Page
|
|
|
|
**39) CUSTOM(1) PHISHING:**
|
|
- Host Your Own Phishing Pages
|
|
|
|
**40) CUSTOM(2) PHISHING:**
|
|
- Host Your multiple Phishing Pages at once
|
|
|
|
</p>
|
|
|
|
<h3>Ascii error fix</h3>
|
|
|
|
`dpkg-reconfigure locales`
|
|
|
|
`Then select: "All locales" Then select "en_US.UTF-8"`
|
|
|
|
`After that reboot your machine. Then open terminal and run the command: "locale"`
|
|
|
|
`There you will see "en_US.UTF-8" which is the default language. Instead of POSIX.`
|
|
|
|
## DISCLAIMER
|
|
<p align="center">
|
|
TO BE USED FOR EDUCATIONAL PURPOSES ONLY
|
|
</p>
|
|
|
|
The use of the HiddenEye is COMPLETE RESPONSIBILITY of the END-USER. Developers assume NO liability and are NOT responsible for any misuse or damage caused by this program. Please read [LICENSE](LICENSE).
|
|
|
|
|
|
|
|
|