$ show dedsec1121fk/DedSec
This repository is a large collection of standalone Python scripts designed for the Termux environment on Android. It is marketed as an educational cybersecurity toolkit but contains functional phishing pages, credential harvesters, location trackers, camera/mic capture scripts, and a trojan for data exfiltration. The codebase also includes some legitimate utilities such as a password manager, file converter, network scanner, and backup tool. The architecture is highly fragmented: each script is self-contained with its own dependency auto-installation, Flask server, and cloudflared tunnel for public exposure. There is no shared module structure, and the code is heavily duplicated across English and Greek translations. The overall quality is low due to copy-paste patterns, hardcoded secrets, suppressed error logging, lack of testing, and reliance on external services like cloudflared. The repository poses significant legal and ethical risks due to its phishing and surveillance capabilities.
The LLM identified 4 files worth highlighting for reuse:
Contains the SecurityUtils class implementing PBKDF2 key derivation, Fernet symmetric encryption, and clipboard integration via termux-clipboard-set. Also includes a password generator and strength analyzer using zxcvbn. This module is self-contained and could be extracted for use in other Termux-based security tools.
Provides the SimpleAppPermInspector class that extracts permissions from APK files and detects known tracker libraries (Google Analytics, Facebook SDK, etc.) with risk scoring. The class is standalone and reusable for mobile security auditing.
Implements a set of URL analysis functions including redirect chain expansion, DNS resolution, TLS certificate inspection, content preview (title, SHA-256 of first 8KB), tracking parameter removal, and Levenshtein distance for domain similarity. These functions are self-contained and could be reused in other security tools.
Performs file analysis using magic byte detection, entropy calculation, and structural analysis for PE, PDF, and Office documents. Includes VirusTotal integration (API key placeholder). The core analysis logic is self-contained and reusable for file identification and malware triage.