R4VEN – Track device location, and IP address, and capture a photo with device details.

The tool hosts a fake website which uses an iframe to display a legit website and, if the target allows it, it will fetch the Gps location (latitude and longitude) of the target, capture multiple pictures of the target along with IP Address and Device Information.

This tool is a Proof of Concept and is for Educational Purposes Only.

Using this tool, you can find out what information a malicious website can gather about you and your devices and why you shouldn’t click on random links or grant permissions like Location to them.

Key Features:

• IP address and geographic location tracking
• Collection of device system information
• Capturing images from the device’s camera
• Integration with Discord for data presentation
• User interaction for location permission
• Display of a website through an embedded iframe
• Regular interval-based data collection
• Access to and upload webcam images
• Formatting and presentation of data in Discord messages
• Links to Google Maps and Google Earth based on location
• Error handling for denied location permission
• User feedback and error messages

On the link click

+ It will automatically fetch the IP address and device information
! If location permission is allowed, it will fetch the exact location of the target.
! If camera permission is allowed, it will capture non-stop from the front camera.

Limitation

- Make sure you port forward else it will not work on the smartphone's browser
# Most browsers auto block extra permissions for ip based URL. so port forward!!
- It will not work on laptops or phones that have no GPS or no Camera, 
# browsers that block javascript,
# or if the target is mocking the GPS location.
# or if a target is using VPN or spoofing IP

- Some browsers auto block location permission like(Brave, Safari etc)

+ Best work with Chrome browser
+ Location accuracy will be more accurate if you use this on a smartphone.

IP location VS. GPS location

- Geographic location based on IP address is NOT accurate,
# Does not provide the location of the target. 
# Instead, it provides the approximate location of the ISP (Internet service provider)

+ GPS fetch almost exact location because it uses longitude and latitude coordinates.
@@ Once location permission is granted @@
# Accurate location information is received to within 20 to 30 meters of the user's location.
# (it's almost the exact location)

OS compatibility :

   

Requirements:

  

⭔ Installation

git clone https://github.com/spyboy-productions/r4ven.git

cd r4ven

pip3 install -r requirements.txt

python3 r4ven.py

NOTE: If you’re not going to use localhost (http://127.0.0.1:8000/image)

Please modify this line with the URL you wish to use.

OR

Please use the -t flag to choose a different URL.

Use the following command to make r4ven executable:

chmod +x r4ven.py

python3 r4ven.py [-t target] [-p port]

Example: python3 r4ven.py -t https://replit.com/myproject/images -p 8080

Enter your discord webhook URL (set up a channel in your discord server with webhook integration)

https://support.discord.com/hc/en-us/articles/228383668-Intro-to-Webhooks

if not have discord account and sever make one, it's free.

https://discord.com/

📍 Track info data will be sent to your discord webhook channel.

• why discord webhook? Conveniently, you will receive a notification when someone clicks on the link.

⭓ To change website template

• open file index.html on line 12 and replace the src in the iframe. (Note: not every website support iframe)

⭓ To port forward install ngrok or use ssh or whatever tool you want to port forward with.

• For ngrok port forward type: ngrok http 8000
• For ssh port forwarding type: ssh -R 80:localhost:8000 ssh.localhost.run

- Warning: Make sure you port forward else it will not work on the smartphone's browser

Contribution:

Contributions and feature requests are welcome! If you encounter any issues or have ideas for improvement, feel free to open an issue or submit a pull request.

😴🥱😪💤 ToDo:

• port forward directly

Use trycloudflare to give web URL https://try.cloudflare.com/ https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/do-more-with-tunnels/trycloudflare/ or use these https://tunnelmole.com/ https://github.com/robbie-cahill/tunnelmole-service

• Mask port forwarded URL using our tool Facad1ng
• Give the option to choose what you want 1. track location 2. camera access 3. just IP and device info 4. all of it
• PHP code to host a website without Python
• Iframe can be warned ..make a phishing template

💬 If having an issue Chat here

⭔ Snapshots