Jackson Godwin. Cybersecurity Analyst & Penetration Tester Email info@jacksontechnology.com.ng

Hey everyone, we’ve unintentionally created a tool that could be used to spy on people and access their sensitive information. The interesting part is that it works like killing two birds with one stone—it’s effective on both Android and Windows users.

The tool is called ShotDroid, a pentesting utility that includes three specific functions:

• Android Files – access files on Android devices
• Android Keylogger – record keystrokes on Android
• Take Face Webcam – capture webcam images

Features

• Hide apps in Android files.
• Custom Android directory.
• For Android Keylogger -> you can see it here: Simple-keyboard or LokiBoard.
• Automatic HTML template in Take Face webcam.
• Custom HTML or customize your HTML folder in take face webcam tool.

Dependencies

In the case of each tool, the dependencies must be pre-configured in the system before the installation of the tool, hence first we have to install both these dependencies in our system with the help of the command below.

Now we will install this tool with the help of the command below.

The tool provides the ability to retrieve files from Android directories, including internal and external storage—such as Images, Videos, WhatsApp data, and more.

You can use this feature for Android keylogging keyboard and reverse shell as well

Now comes the main part of this tool, where we will show you how you can spy on anyone by stealing their picture. We must choose option three, which will generate an ngrok link that we need to share with the victim whose live picture we want to steal.

Hmm 🙁 !! Suppose if you are not able to copy the url then you can grab the url by opening the following url on browser.

When the victim opens the URL, a prompt will request permission to access their device's camera. The moment the victim grants access, the image capture will commence."

Done 🙂 !! Everything is locked, loaded, and ready to explode."

"BOOOM 🙂 !! All captured images are now saved in the system, as you can see."

Done 🙂 !! Just like that, spying on someone is possible—no matter their OS."

Disclaimer
For authorized security testing only. Unauthorized surveillance or data collection is illegal. Use at your own risk. Do not use without explicit permission.