Storm-Breaker is a powerful social engineering tool that allows hackers to access the victim’s location, camera, and microphone. You can also use a storm breaker to track and log IP addresses from the victim.
Install Stormbreaker
First, you need to open the terminal in Kali Linux and clone the tool using the following command.
git clone https://github.com/ultrasecurity/Storm-Breaker.git
Once done with that, change the directory to Storm-Breaker and run the following commands to start the tool.
cd Storm-Breaker
$ sudo bash install.sh
$ sudo python3 -m pip install -r requirements.txt
$ sudo python3 st.py
Storm-Breaker is now running, and it’s telling you to run ngrok on port 2525. So open a new terminal and type.
ngrok http 2525
In the above image, you can see the forwarding link. Just open the link in the browser.
Here it will ask for login credentials to access the web panel. The default credentials are admin for the username and admin for the password.
On the web panel, you can see different phishing links which you need to send to the victim. The first link can be used to access the camera, the second is for the microphone, and the third link is to grab the location.
For this example, I will use the third link to find the location of the victim. The link is suspicious for the victim, so you can mask the address using a link shortener or embed the link into a button.
If the victim clicks on the link he will be prompted to allow the location and as soon as they allow the location, you will find the details of the system and grab their exact location as shown in the web panel.
At this point, you can open the “Google Map Link” to see the location of the victim.
Here you can see the exact location of the victim.
Conclusion
So, this is how an attacker can get the target location and system details. Also, an attacker can get access to the camera and microphone using the first two links from Storm-Breaker.
This tool is for educational purposes only, and not for causing malicious or damaging attacks.
Tags: cybersecurity training, network security courses, ethical hacking tutorials, web penetration testing, linux security training, online cybersecurity classes, wireless network security, learn ethical hacking online, linux for cybersecurity professionals.