A proof of concept exploit tool to bypass Pimeyes' obfuscation and provide full premium search results. Despite attempts to contact Pimeyes, no response was received, leading to the publication of the tool. It enabling retrieval of unobfuscated web links from search results.
Use: CLI
- Clone the Repository "git clone https://github.com/addycb/Pimeyes-Free-POC.git"
- Navigate into cloned Repository
- Run the tool :: "python main.py"
- Input path of the image you want to search
- Save the results
- ????
- Profit
GUI:
- Clone the directory "git clone https://github.com/Nthompson096/Pimeyes-Free-GUI.git"
- OR Clone the main git repo directory "git clone https://github.com/addycb/Pimeyes-Free-POC.git"
- Navigate into Cloned repository (cd)
- Navigate into the directory "cd GUI"
- Run the tool :: "python main-gui.py"
- Input path of the image you want to search
- Save the results
- ????
- Profit Will still get rate limited to at least 10ish searches, if you really need to search for a face this bad; use a VPN like mullvad or use TOR SOCKS that's built inside the script. Will also add that copy and paste is a hit or miss; some images may be WAY too big for a copy paste; best to save on your device if it doesn't work. For images that are not found within it's database, it will throw up this error here:
That's normal; it means it can't find anything on it's database.
- Whether the site is from an adult site or market site
- Ability to search VIA TOR SOCKS (they rate limit with IP)
- Drag and drop functions, along with paste from clipboard
All in the flask application.
python -m venv venv
source venv/bin/activate
pip install -r requirements.txt
Result: You will receive a collection of unobfuscated results, namely links to where that face was found.
Will probably change the title of this repo; so long as the maintainer of the original is ok with this, seems to work.
Visual example of the results page inside the flask app:
