Welcome to Camphisher – the ultimate real-life tool for exploiting webcam access using advanced social engineering tactics, built with Python and Flask. This isn’t just a demo; it's a fully functional instrument designed for ethical hacking, research, and educational testing in strictly controlled environments.
Camphisher leverages the power of the Flask framework to serve a deceptive yet convincing phishing page that mimics legitimate camera access prompts. Once activated, it captures live video feeds or images from the target’s webcam. With its open source code, you can delve into every detail and learn the techniques real-life hackers use! 👨💻👩💻
- ✅ Real-World Operation: Fully functional in live scenarios.
- ✅ Python & Flask Powered: Built on a robust Flask backend for smooth operation.
- ✅ Interactive Social Engineering: Engaging interfaces that mimic trusted camera prompts.
- ✅ Open Source & Customizable: Modify every part of the code to suit your research or testing needs. 🔍
- Python 3.x
- Flask framework (
pip install Flaskor install viarequirements.txt) - A modern web browser (Chrome, Firefox, Safari, etc.) for testing
- Basic command-line knowledge
- Access to a local server or deployment environment
-
Clone the Repository:
⚡ Get ready to explore the codebase!git clone https://github.com/programmingwithprince/camphisher.git -
Navigate to the Project Directory:
🚀 Step into the project folder.cd camphisher -
Install Dependencies:
🔧 This command will install Flask and all required libraries.pip install flask -
Review Configuration: Open the
app.pyfile to customize settings like host IP and port if needed. - Deploy the Code: You can run the tool on your localhost or deploy it on your server.
Follow these steps to run Camphisher locally, configure templates, or deploy it securely to the internet:
-
Start the Backend Server:
In your terminal, run the application backend script:⚡ This launches the Flask server locally, configured by default to listen on all network interfaces via port 5000.python main.py -
Local Testing:
Open your modern web browser and navigate to:🌐 You can test the interface behavior locally. To see the landing page, navigate to the root route, or test standard assets by viewing your loaded templates.http://localhost:5000 -
Deploying Globally (Making it Public):
Since the application backend is bound to0.0.0.0, you have total flexibility in how you expose or route traffic to your local port 5000 without relying on third-party python extensions. You can route public traffic using any of the following standard approaches:- Cloudflare Tunnels: Routing traffic securely via Cloudflare edge networks:
cloudflared tunnel --url http://localhost:5000 - Ngrok CLI Binary: Mapping an encrypted tunnel directly using the official CLI client:
ngrok http 5000 - Router Port Forwarding: Forwarding incoming traffic from an open public port on your gateway directly to your local host IP on port 5000.
- Cloudflare Tunnels: Routing traffic securely via Cloudflare edge networks:
-
Customizing Front-End Templates & JavaScript:
The logic functions out of the box usingindex.htmland your loaded configuration files. If you wish to adapt these templates into your own separate custom deployment:- Simply copy the integrated front-end JavaScript logic responsible for webcam access handling.
- Ensure the target endpoint in your JavaScript functions points directly to your active
/postroute via a standard JSON POST request. - Your customized interface elements will automatically stream the binary payloads back to this streamlined Python backend flawlessly.
-
Monitor Output:
When an active browser session initiates a valid context transmission, the payload is parsed, stripped of its Data URI scheme prefix, and safely decoded from base64. The file is written straight to disk dynamically as a timestamped JPEG, printing a confirmation log right to your terminal window.
For users looking to refine and extend the tool:
- 🔹 UI Tweaks: Modify the HTML and CSS to adjust the appearance of the phishing interface.
- 🔹 Behavior Changes: Edit the JavaScript and Python scripts in
app.pyto modify how access prompts and data capture are handled. - 🔹 Backend Integration: Integrate additional server-side logic (using Python, Node.js, PHP, etc.) for advanced logging, encryption, or data management. 🚀
WARNING: Camphisher is a potent tool designed strictly for authorized penetration testing, ethical hacking, and cybersecurity research. Unauthorized use against any system is illegal and unethical. 🚫
Always secure informed consent before employing this tool and operate strictly within legal limits. Use Camphisher responsibly and ethically at all times. 💼
Contributions that enhance functionality, improve security, or bolster the educational value of Camphisher are welcome. To contribute:
- Fork the repository on GitHub.
- Create your feature branch and implement your changes. 💥
- Submit a pull request detailing your improvements.
A: No. Although it’s fully operational, Camphisher is intended solely for ethical research, testing, and education. Always ensure you have proper authorization. 🔐
A: Absolutely! The tool is open source, allowing you to customize the interface and functionality to meet your specific testing needs. 🎨
A: Consult local legal guidelines and secure explicit permissions before deploying Camphisher. Adherence to legal standards is crucial! ⚖️
Camphisher is released under an open-source license. For more information on permissions, modifications, and redistribution, please refer to the LICENSE file in this repository.
For inquiries, bug reports, or support requests, please open an issue on the GitHub repository or contact the creator directly via the communication channels provided on the project page. 🔗
Remember: With great power comes great responsibility. Use Camphisher ethically and responsibly. 👊