thewhiteh4t/seeker
Seeker
Seeker is a social engineering location tool and browser geolocation capture system. It provides a framework for capturing precise GPS coordinates and device metadata by hosting deceptive webpages that prompt users for location permissions.
The project includes an HTML phishing template engine for deploying custom or predefined website clones designed to trick users into granting sensitive permissions. It further utilizes a device fingerprinting tool to collect hardware specifications, operating system details, and screen resolution from visiting clients.
The system incorporates network reconnaissance capabilities to determine public and local IP addresses. Captured device and location data can be forwarded to external endpoints via webhooks or delivered through Telegram bot notifications.
The application is packaged as a containerized deployment to ensure consistent execution across different host systems.
Features
- Browser Geolocation Capture - Provides a system to capture precise GPS coordinates by prompting users for browser location permissions.
- Geolocation Access - Pinpoints the precise physical location of smartphones by prompting for browser-native GPS permissions.
- Social Engineering Tools - Deploys deceptive website templates to trick users into granting sensitive location and device permissions.
- Target Location Tracking - Uses deceptive webpages to pinpoint the precise physical location of a target device.
- Device Fingerprinting - Executes JavaScript to extract hardware specifications and operating system metadata for target identification.
- Social Engineering Phishing - Deploys deceptive website clones to trick users into granting sensitive location permissions.
- Phishing Page Generators - Provides an engine for deploying custom HTML and CSS clones to deceive users into granting permissions.
- Permission Harvesting - Retrieves latitude and longitude from targets by manipulating browser location permission requests.
- Data Exfiltration - Automates the movement of captured device and location data out of the target's browser to external servers.
- Webhook Delivery - Forwards captured device and location data to external APIs or bots using asynchronous webhooks.
- Geographic Information Systems - Processes and captures latitude and longitude coordinates for geospatial analysis of the target.
- HTTP Data Forwarding - Transmits collected location and device metadata to external endpoints using HTTP protocols.
- IP Address Discovery Tools - Automatically determines the public and local IP addresses of targets interacting with the hosted page.
- IP-to-City Localization - Determines the public and local IP addresses of visiting clients to resolve their approximate geographic location.
- Network Reconnaissance Tools - Maps the network environment of visiting clients by determining their public and local IP addresses.
- Geographic IP Lookups - Resolves public and local IP addresses to determine the approximate network location of visiting devices.
- Deceptive Pages - Generates custom deceptive landing pages by replacing variables in HTML templates during startup.
- Phishing Templates - Provides a template engine for designing custom HTML pages that mimic legitimate websites.
- Penetration Testing Frameworks - Locates smartphones using social engineering techniques.
