Skip to content

Latest commit

 

History

History
166 lines (116 loc) · 4.83 KB

README.md

File metadata and controls

166 lines (116 loc) · 4.83 KB
Raw

Twitter - Telegram - Keep Eyes on "Dark" YouTube Channel

Concept behind Locator is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites.Locator Hosts a fake website on In Built PHP Server and uses Serveo to generate a link which we will forward to the target, website asks for Location Permission and if the target allows it, we can get :

  • Longitude
  • Latitude
  • Accuracy
  • Altitude - Not always available
  • Direction - Only available if user is moving
  • Speed - Only available if user is moving

Along with Location Information we also get Device Information without any permissions :

  • Operating System
  • Platform
  • Number of CPU Cores
  • Amount of RAM - Approximate Results
  • Screen Resolution
  • GPU information
  • Browser Name and Version
  • Public IP Address
  • IP Address Reconnaissance

How is this Different from IP GeoLocation

  • Other tools and services offer IP Geolocation which is NOT accurate at all and does not give location of the target instead it is the approximate location of the ISP.

  • Locator uses HTML API and gets Location Permission and then grabs Longitude and Latitude using GPS Hardware which is present in the device, so Locator works best with Smartphones, if the GPS Hardware is not present, such as on a Laptop, Locator fallbacks to IP Geolocation or it will look for Cached Coordinates.

  • Generally if a user accepts location permsission, Accuracy of the information recieved is accurate to approximately 30 meters, Accuracy Depends on the Device.

Note : On iPhone due to some reason location accuracy is approximately 65 meters.

Templates

You can choose a template which will be used by Locator from these :

  • NearYou
  • Google Drive
  • WhatsApp
  • Telegram

Tested On :

  • Kali Linux
  • BlackArch Linux
  • Ubuntu
  • Kali Nethunter
  • Termux
  • Parrot OS

Setup Ngrok server

  • visit ngrok official website and claim your free account to download the setup.

  • Make sure while you're using ngrok servers,your internet connection is better to interchange the packets.If not you cannot continue this progress.

  • If you want to get know more about ngrok using/handlings please visit there Documentations page here. Docs

Installation

Kali Linux / Ubuntu / Parrot OS

git clone https://github.com/Optane002/Locator.git
cd Locator/
chmod 777 install.sh
./install.sh

BlackArch Linux

pacman -S Locator

Docker

docker pull Optane002/Locator

Termux

git clone https://github.com/Optane002/Locator.git
cd Locator/
chmod 777 termux_install.sh
./termux_install.sh

Usage

python3 Locator.py -h

usage: Locator.py [-h] [-s SUBDOMAIN]

optional arguments:
  -h, --help                              show this help message and exit
  -s SUBDOMAIN, --subdomain Subdomain 	  Provide Subdomain for Serveo URL ( Optional )
  -k KML, --kml KML                       Provide KML Filename ( Optional )
  -t TUNNEL, --tunnel TUNNEL              Specify Tunnel Mode [manual]

# Example

# SERVEO 
########
python3 Locator.py

# NGROK ETC.
############

# In First Terminal Start Locator in Manual mode like this
python3 Locator.py -t manual

# In Second Terminal Start Ngrok or any other tunnel service on port 8080
./ngrok http 8080

#-----------------------------------#

# Subdomain
########### 
python3 Locator.py --subdomain google
python3 Locator.py --tunnel manual --subdomain zomato

#-----------------------------------#

# Docker Usage
##############

# SERVEO
########
docker run -t --rm Optane002/Locator

# NGROK
#######

# Step 1
docker network create ngroknet

# Step 2
docker run --rm -t --net ngroknet --name Locator Optane002/Locator python3 Locator.py -t manual

# Step 3
docker run --rm -t --net ngroknet --name ngrok wernight/ngrok ngrok http Locator:8080

Known Problems

  • Services like Serveo and Ngrok are banned in some countries such as Russia etc., so if it's banned in your country you may not get a URL, if not then first READ CLOSED ISSUES, if your problem is not listed, create a new issue.

Please Be Mentioned

This tool is a Proof of Concept and is for Educational Purposes Only, Locator shows what data a malicious website can gather about you and your devices and why you should not click on random links and allow critical permissions such as Location etc.