Hallow friends welcome to our another blog post.In this blog post I am going to tell you about how to install and use camphish tool in Termux. If you are a termux user you should know about this tool.And if you are a regular internet user you should be aware of such kinds of techniques available on the internet.
What is camphish tool
Camphish is an image taker tool available on GitHub. Easily can be installed in termux and easy to use.CamPhish Hosts a fake website on in built PHP server and uses ngrok and serveo to generate a malicious link, which can be easily sent to any internet user.But good social engineering skills are needed to use it like a professional.The Campish tool is an upgraded version of the Saycheese tool, before that I wrote an article about it.
camphish tool can be installed in Kali Linux also it can be installed in android devices using termux.
How to install camphish tool in termux
To install camphish tool in termux open your termux application and use the following commands step by step which I have writing below.
1.pkg update && pkg upgrade
This command will update and upgrade your all termux packages.And if showing any error , Uninstall your termux application and install it from F-Droid .
2.pkg install git php wget openssh
We are going to clone camphish tool from GitHub so we need to install git in termux.php will help us to make a local server.openssh to transfer images from victims device to attacker's machine.And The malicious link we will get through wget.
3.git clone https://github.com/techchipnet/CamPhish.git
Then camphish tool will be automatically cloned on our termux.
4.cd CamPhish
5.ls
Then you will find a file "camphish.sh" .To executive that file we will use the command
6.bash camphish.sh
Then it's interface will be look like this
Here we need to select the port forwarding option we can choose between ngrok and Serveo.net But serveo server goes down sometimes so we choose ngrok.
Don't forget to turn on your mobile Hotspot while using ngrok. Otherwise the link might not generate.
Then it will prompt for choose phishing template as we can see in the following screenshot:
Here we got two options, option 1 is festival wishing and other is YouTube. We can choose whatever depending on our social engineering. For an example we choose option 1 for festival wishing.Then we have to enter a festival name.
Suppose I entered Holi then automatically this tool will start php server then ngrok server and after that we will get a phishing page link.
Where camfiles will be stored
After sending this malicious link to the victim if victim click on this link it will ask the camera permission.After getting the camera access this script will take pictures continuesly and send then to our device.
Received camfiles location will be
/data/data/com.termux/files/home/CamPhish
Then you can move received camfiles to your gallery by using the command
1.termux-setup-storage
2.mv <file name> /sdcard
camphish not generating link
At first you have to be sure that you have turned on your mobile Hotspot. in spite of doing that if link is not generating I'm giving you a trick.
Open your web browser and search http://127.0.0.1:4040 at the same time when you are using Camphish tool . Here you will find the link that you did not find in Camphish.
1 Comments
CMD
ReplyDelete