$ show thewhiteh4t/seeker
Seeker is a CLI-based social engineering tool that hosts fake web pages designed to trick users into granting geolocation permissions. When a victim visits the served page, JavaScript collects precise GPS coordinates, device fingerprinting data (OS, CPU cores, RAM, screen resolution, GPU, browser, IP addresses), and public IP information via ipwhois.app. The tool uses PHP's built-in server to serve the templates and handles incoming data through PHP endpoints that write to local log files. Seeker then polls these logs, stores results in CSV/KML formats, and can forward captured data to Telegram bots or Discord webhooks. It supports multiple phishing templates (Google Drive, WhatsApp, Telegram, Zoom, reCAPTCHA, and a 'NearYou' map page) and integrates with tunneling services like ngrok for public exposure. The repository is primarily a penetration testing and educational proof-of-concept, demonstrating the ease of harvesting geolocation data through deceptive web pages. While functional and well-documented, the codebase lacks tests and uses environment-variable-driven configuration to avoid interactive prompts in deployment scenarios.
The LLM identified 1 files worth highlighting for reuse:
Self-contained JavaScript file that collects geolocation coordinates (via navigator.geolocation.getCurrentPosition with high accuracy) and extensive device fingerprinting data including navigator.platform, hardwareConcurrency, deviceMemory, WebGL GPU vendor/renderer, screen resolution, and user-agent-derived browser/OS. It posts the collected data to three PHP endpoints (info_handler.php, result_handler.php, error_handler.php) and is copied into each template directory at startup. This file is reusable as a standalone client-side data collection module for any project requiring high-precision location and device profiling, with minimal adaptation needed to change the target endpoints.