Facad1ng is a command-line URL masking tool designed for security research and phishing awareness training. It takes three inputs: an original URL, a custom domain, and phishing keywords, then generates masked URLs by shortening the original URL via services like TinyURL and embedding it in a deceptive format (e.g., https://[email protected]/path). The tool demonstrates how attackers obfuscate malicious links to aid defensive security training. The core functionality is implemented in Python with input validation, multiple shortener support, and a user-friendly interface featuring ASCII art and animated loading screens.
This repository is a large collection of standalone Python scripts designed for the Termux environment on Android. It is marketed as an educational cybersecurity toolkit but contains functional phishing pages, credential harvesters, location trackers, camera/mic capture scripts, and a trojan for data exfiltration. The codebase also includes some legitimate utilities such as a password manager, file converter, network scanner, and backup tool. The architecture is highly fragmented: each script is self-contained with its own dependency auto-installation, Flask server, and cloudflared tunnel for public exposure. There is no shared module structure, and the code is heavily duplicated across English and Greek translations. The overall quality is low due to copy-paste patterns, hardcoded secrets, suppressed error logging, lack of testing, and reliance on external services like cloudflared. The repository poses significant legal and ethical risks due to its phishing and surveillance capabilities.