In this tutorial, I will show you how to take cam shots from someone’s phone front camera or PC webcam using a tool called “CamPhish”.
CamPhish hosts a fake website built on PHP server and uses ngrok & serveo to generate a link that will be forwarded to the target. The link can be used over the internet.
Install CamPhish
First, you need to clone the camphish tool by executing the following command:
git clone https://github.com/techchipnet/CamPhish
Then use the following commands to start the tool:
cd CamPhish
bash camphish.sh
As you can see it says to choose between ngrok and serveo. In my case, I will use ngrok by pressing 1.
As soon as, you’ll press 1 it will ask you to choose the template you want to use for the attack. I will choose option 2 for YouTube.
Here the YouTube watch ID means then end ID of a YouTube video URL as shown in the screenshot below.
Camphish will generate a direct link which you need to send to the victim.
The link is suspicious, so you can hide it behind some text as a hyperlink or embed the link into a button.
Once the victim open’s the link and allows the camera permission, camphish will start taking pictures from the target using the front camera.
Here you can see “Cam file received”. That means that the process of taking pictures has started.
Conclusion
These types of attacks can be mitigated by first looking at the link and how the URL is formed. Therefore, be very suspicious of any emails you receive, if the email contains a link, don’t click on it. Instead of clicking on the link, type in the web address to access the website.
Tags: cybersecurity training, network security courses, ethical hacking tutorials, web penetration testing, linux security training, online cybersecurity classes, wireless network security, learn ethical hacking online, linux for cybersecurity professionals.