WebCamPhishing

Bypassing camera on any device using a php server and javascript for client-side.

Version 1.5 [Beta]

What is WebCamPhishing?

WebCamPhishing is techniques to take cam shots of target's phone front camera or PC webcam. WebCamPhishing hosts a fake website on in built PHP server and uses ngrok & serveo to generate a link which we will forward to the target, which can be used on over internet. website asks for camera permission and if the target allows it, this tool grab camshots of target's device.

Features

In this tool I added two automatic webpage templates for engaged target on webpage to get more picture of cam

• Festival Wishing
• Live YouTube TV
• Online Meeting [Beta]

Simply enter festival name or youtube's video ID

This tool tested on:

• Kali Linux
• Termux
• Mac OS
• Ubuntu
• Arch Linux
• Windows WSL
• Tails OS
• Parrot Security Linux

Installing and requirements

Update and upgrade packages

sudo apt update && sudo apt -y upgrade 

This tool require PHP for webserver, SSH or Serveo link. First run following command on your terminal

sudo apt -y install php openssh git wget unzip gzip

Follow the command to use the module/script:

git clone https://github.com/jasut1n/WebCamPhishing
cd WebCamPhishing
chmod +x webcamphish.sh
sudo ./webcamphish.sh

Change Log:

Version: 1.5: Added new online meeting template

Version: 1.4: Ngrok authtoken update

Version: 1.3: Fix ngrok direct link

Credits

WebCamPhishing is created to help in penetration testing and ethical hacking it's not responsible for any misuse or illegal purposes.

WebCamPhishing is inspired by https://github.com/thelinuxchoice/ and https://github.com/techchipnet/ Big thanks to @thelinuxchoice and @techchip

©

Copyright of Justine Dela Torre (Jasutin)

This WebCamPhishing module/script is based only on my knowledge, and please use this only on educational purposes and also WebCamPhishing is created to help in penetration testing and ethical hacking it's not responsible for any misuse or illegal purposes.