SEEKER: Accurately Locate Devices using Social Engineering

SEEKER: Accurately Locate Devices using Social Engineering

May 01, 2021 2 min read 2 views 0 discussions
Table of Contents

    Seeker is a Social Engineering tool, used to host a fake page that requests your location, when you give him back permission, the application shows you the exact location.

    ┌──(mrdev㉿kali)-[~]
    └─$git clone https://github.com/thewhiteh4t/seeker.git
    ┌──(mrdev㉿kali)-[~/Desktop]
    └─$ apt update
    ...........
    .........
    ┌──(mrdev㉿kali)-[~/Desktop]
    └─$apt install python3 python3-pip php
    ┌──(mrdev㉿kali)-[~]
    └─$cd seeker
    ┌──(mrdev㉿kali)-[~/seeker]
    └─$chmod +x install.sh
    ┌──(mrdev㉿kali)-[~/seeker]
    └─$ sudo bash install.sh
    ┌──(mrdev㉿kali)-[~/seeker]
    └─$./seeker.py -t manual
    ┌──(mrdev㉿kali)-[~]
    └─$ ngrok http 8080

    Seeker Hosts a fake website that asks for Location Permission and if the target allows it, we can get :

    • Longitude
    • Latitude
    • Accuracy
    • Altitude - Not always available
    • Direction - Only available if the user is moving
    • Speed - Only available if the user is moving
     
     


    Along with Location Information, we also get Device Information without any permissions :

    • Unique ID using Canvas Fingerprinting
    • Device Model - Not always available
    • Operating System
    • Platform
    • Number of CPU Cores - Approximate Results
    • Amount of RAM - Approximate Results
    • Screen Resolution
    • GPU information
    • Browser Name and Version
    • Public IP Address
    • Local IP Address
    • Local Port
    Automatic IP Address Reconnaissance is performed after the above information is received.


    Steps to Install and run SEEKER

    1. Open your browser and click here to this GitHub link.

    2. you see the installation steps, and the steps to install seeker.

    3. Open a new terminal and run the following command:

    4. Use the following command to get the seeker running:

    5. The server is offline now, we have to set it to manually.

    6. Run the following command to set it manually:

    7. It will ask you to select the template. Type 0 to choose near you.


     8. Here you see on my terminal screen, the server is started on port number 8080, so we need to set up Port Forwarding using Ngrok. Open your terminal and run the following command:

    If you don't know what is Ngrok then click here

    9. Copy this Link and send it to the victim.

    10. When the victim click continues and Allow Location Access, you will find out the location of the victim's device and also Device Information.

    Community Q&A