Up next in 10
I hacked 100 phone cameras, mic & Location. In this jaw-dropping video, witness the unbelievable as I hacked 100 phone cameras, mic & location data — and the outcome will leave you in awe!
Explore the hidden world of mobile vulnerabilities and what can happen when these security loopholes are exposed. From the sneaky methods I used to gain access, to the shocking reactions of those unaware — this isn't just a tech tutorial, it's a wake-up call for smartphone users everywhere!
Don’t miss out on this eye-opening experience; join me as we unveil the truth and discuss essential tips to protect your privacy! #PrivacyMatters #HackedSecrets
Show More Show Less View Video Transcript
0:00
Today we're going to learn how to access
0:01
the location, camera, and microphone of
0:04
any device, but only in an ethical
0:05
hacking way. So, let's get started. This
0:07
video is for educational purposes only.
0:10
For this task, we need a tool called
0:11
Stormbreaker. This tool is available on
0:13
GitHub. First, go to Google and search
0:16
Stormbreaker GitHub, a social
0:17
engineering tool that creates a fishing
0:19
link to gather device info and access
0:22
camera, mic, and location. It's a social
0:24
engineering tool made by Ultra Security.
0:26
You'll find it in the first result. With
0:28
this tool, you can collect normal data,
0:30
get device info, access the camera,
0:32
microphone location, and even check the
0:34
weather of the targets area. Now, copy
0:36
the HTTP link of the GitHub repo. Open
0:38
your terminal. Type pseudo su. This will
0:41
give you root access. Enter your OS
0:43
password, the one you use to log in.
0:45
Now, go to the /op directory cd/opt.
0:48
Then, clone the Stormbreaker tool. Get
0:50
clone. Paste the GitHub link here. It
0:52
won't take much time. Use ls to see what
0:54
is in that directory. Now, go into the
0:56
Stormbreaker folder. CD Stormbreaker.
0:58
How does it work? It creates a fishing
1:00
page and uses the victim's browser to
1:02
request permissions. Camera, mic,
1:04
location. If the target accepts, it
1:05
collects that data and sends it to you.
1:07
Let's update our packages. A PT update.
1:10
This will take some time if you don't
1:11
update regularly. It depends on your
1:13
internet speed. Next, install the
1:15
necessary Python modules. Apt install
1:17
Python 3- request Python 3-colorama,
1:21
Python 3- pseudo, request for data,
1:23
colama for colored text, and subtle for
1:26
device info. These are needed for
1:27
Stormbreaker. Now install the setup file
1:29
bashinstall.sh.
1:31
This will take a little time depending
1:33
on your internet speed. Stormbreaker is
1:34
a social engineering tool. It creates a
1:36
fake link like a normal website. When
1:38
the target opens that link, the site
1:40
asks for permission to access camera,
1:42
mic, and location. If the target clicks
1:44
allow, Stormbreaker collects the data
1:46
like live camera feed, mic audio, device
1:48
info, and real-time location. After the
1:50
installation is done, run the tool using
1:52
Python 3Sync.pi.
1:55
All this data shows up directly in your
1:56
terminal. Now we need to download Ingro.
1:58
Go to the official site ingrock.com.ro
2:01
is a tool that creates a tunnel between
2:03
your local machine and the internet.
2:04
Normally local servers can't be accessed
2:06
from outside, but Ingro gives you a
2:08
public URL. Then visit ingrock.com/d
2:11
download. When they open it, it connects
2:13
to your local server through Enro. It's
2:15
fast, secure, and works perfectly for
2:18
social engineering tools. Download Enro
2:20
for your system. Enro is a tool that
2:22
creates a secure tunnel between your
2:24
local server and the internet. Normally,
2:26
local servers can't be accessed
2:27
externally, but Enrov provides a public
2:30
URL. After downloading, copy the command
2:32
given there, open a new terminal and
2:34
paste it into a new terminal to install
2:35
Enro. Enro allows you to create a public
2:38
URL for your local server, which is
2:39
normally inaccessible from the internet.
2:41
When you're running a fishing tool like
2:43
Stormbreaker, it generates a local
2:44
server on your machine. Using Enro, you
2:46
can create a public link for that
2:48
server. You then send this link to the
2:50
target disguised as a normal website.
2:52
When they click and open it, Enro
2:53
connects their device to your local
2:55
server. If the target allows permissions
2:57
like camera, mic, or location, Enro will
2:59
send that data back to your terminal.
3:01
This way, Enro helps in collecting
3:02
sensitive information from the target
3:04
device through a simple fishing link.
3:06
Let's set up Enro step by step. First,
3:08
go to the official website
3:09
www.enrock.com.
3:12
Click on the sign up button in the top
3:13
right corner. You can sign up using your
3:15
email address or simply log in using
3:17
your Google or GitHub account. After
3:19
signing up, you'll be taken to your
3:21
dashboard. Here you'll see your unique
3:22
authentication token, that command. Now,
3:24
open your terminal and paste the command
3:26
you just copied. Press enter. This will
3:28
link your local NGO installation to your
3:30
account. It's an important step. Without
3:32
this, nayro won't work properly. Once
3:34
it's authenticated, you're ready to go.
3:36
After running the ngro command, the tool
3:38
will automatically create a secure
3:40
public URL. This URL connects to your
3:43
local server. Now copy the HTTPS link
3:45
and use it wherever needed. For example,
3:47
in a fishing tool or to test a local web
3:50
page from another device. This link is
3:51
now accessible from anywhere. In that
3:53
case, use the default credentials.
3:55
Username, admin, password, admin. These
3:58
are commonly used as default login
4:00
details in many open-source tools for
4:03
quick setup and testing. After entering
4:05
the credentials, you'll gain access to
4:06
the control panel. Inside the tools
4:08
dashboard, you'll see multiple links
4:10
generated separately. Each link is
4:12
designed for a specific type of access
4:14
from the target device. For example, one
4:16
link is used to access the target's
4:18
camera, another for microphone access,
4:20
and a separate one for location
4:22
tracking. There may also be links for
4:24
collecting basic device information or
4:26
even checking the weather at the
4:27
target's location. You can choose which
4:29
link to send based on the type of data
4:31
you want to collect. When the target
4:32
clicks the link, you instantly receive
4:34
their IP address and location details.
4:37
You also get a live map showing their
4:39
exact position, including city, region,
4:41
and country, enabling you to capture
4:43
data from a target device. With tools
4:45
like Stormbreaker, you can generate
4:47
specific links for gaining access to the
4:49
target's camera, microphone, and even
4:51
track their location. By clicking these
4:53
links, the target unknowingly shares
4:55
valuable information like their IP
4:56
address, location, device details, and
4:59
more. Once the target interacts with the
5:01
link, all the collected data is
5:03
displayed on the website's dashboard.
5:04
You can see details such as the targets
5:06
IP address, location, device
5:08
information, and real-time updates on
5:10
their actions. The dashboard also shows
5:12
the targets camera and microphone
5:14
access, as well as their GPS location on
5:16
a live map. Additionally, it will show
5:18
other details like the devices operating
5:20
system, browser type, and even the time
5:22
zone. All this information is neatly
5:24
organized on the dashboard, making it
5:26
easy to monitor and analyze in real
5:28
time. This allows you to keep track of
5:30
every action the target takes without
5:32
any confusion. If you're practicing
5:34
ethical hacking, always ensure you're
5:36
doing so within the boundaries of the
5:37
law and with the consent of the people
5:39
involved.
Jobs & Education