spyboy-productions / facad1ng

The Ultimate URL Masking Tool - An open-source URL masking tool designed to help you Hide Phishing URLs and make them look legit using social engineering techniques.

Spyo

Powerful CyberSecurity Bot.

Invite Bot | Discord Server | Website

---

join our cybersec Discord server join here

---

• 🌐 Our Blog: https://spyboy.blog/

---

People behind bot

╰Founder: spyboy

╰Co-Founder: sudo whoami

Contributors:

Awesome developers who helped us and made some new commands for bot

• Taj

• professor_kueue

• Denzven

• Flampt

Credits:

Took snippet off their code...

https://github.com/Rapptz/RoboDanny

https://github.com/Nirlep5252/EpicBot

https://github.com/LeoCx1000/discord-bots/tree/master/DuckBot

Note: if you want to get credit because you helped us, or because we took a snippet off your code, let me know and we will gladly mention you here.

facad1ng's Issues

doesnt work

Hey, from my test, the tool didnt' work. Its generated 10 lines maskied url, which is not clickable and useful, I mean the masking option is bugged and didn't work! Could u fix her ?

Why do I keep getting this error?

Traceback (most recent call last):
File "/home/bootywarrior/Facad1ng/facad1ng.py", line 53, in
s.tinyurl,
AttributeError: 'Shortener' object has no attribute 'tinyurl'

I literally just installed it on Parrot OS

Improper user input validation and exception handling

Description: So recently I was checking running your code on my machine and it was working fine for the legit URLs, and it provided me the modified phishing URL, which was great. However when I checked your code, there I found out several issues with the functions you've written for validation several inputs. I was able to provide any type of input that doesn't need to be a proper URL or domain name.

Functions used for validating user input:

1. validate_web_url
2. validate_custom_domain
3. format_phish_keywords ( I think, it'd be better if you perform some validation here as well, and allow users to only enter a word containing only alphabets and also set a fixed length for phishing keywords).

Steps to reproduce:

1. git clone the repo.
2. run facad1ng.py
3. for the original link, enter input string https://///////////////////////////////////////////1. It'll accept this.
4. for the custom domain, enter whatever input string that doesn't contain :// or /. For example: . (dot) is acceptable as well
5. for the phishing keywords, enter any length of string, it'll get accepted and the script generates URLs with these long keywords.
6. with the above inputs, your script will raise an exception, and throw the exception on the console. So, it's better if you handle such exceptions and test-cases as well.

Screenshots:

1. Exception not handled properly and input validation
   

2. No fixed length implemented for phishing keywords
   

Hope this help, also would you like to allow me to raise a PR for the same? good to contribute a little on such cool projects.