Skip to content

versatile red team simulation tool for testing browser-based attacks. It supports payloads like keylogging, screenshot capturing, webcam access, clipboard hijacking, geolocation tracking, and more

License

Notifications You must be signed in to change notification settings

viralvaghela/Specter

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

10 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Specter - Red Team Simulation Tool [ Still In a Development ]

Specter is a versatile and dynamic red team simulation tool designed to facilitate browser-based attacks for security assessments. This tool allows penetration testers to deliver and manage a wide variety of payloads, including:

  • Keylogger: Capture and send keystrokes back to the server
  • Geolocation Tracking: Retrieve and send the client's geographic location
  • Screenshot Capture: Capture screenshots and send them back as Base64 images
  • Webcam Access: Capture webcam images and send them back as Base64
  • Clipboard Hijack: Retrieve clipboard content from the client
  • File Download: Download files from a URL and send their content back
  • APK Download: Trigger APK downloads from specified URLs
  • Speech-to-Text: Convert spoken words into text on the client side

Features

  • Browser-based payload execution: Send custom or pre-defined JavaScript payloads directly to the client.
  • Base64 Encoded Data: Supports payloads that send screenshots, webcam captures, and other data encoded in Base64 format.
  • Real-time interaction: Receive real-time feedback from the client, including keystrokes, captured screenshots, and more.
  • Custom payloads: Easily extend Specter with custom JavaScript payloads.

Requirements

  • Python 3.7+
  • websockets library for WebSocket communication
  • A web browser that supports JavaScript execution and WebSockets

Installation

  1. Clone this repository:
    git clone https://github.com/your-username/specter.git
    cd specter

About

versatile red team simulation tool for testing browser-based attacks. It supports payloads like keylogging, screenshot capturing, webcam access, clipboard hijacking, geolocation tracking, and more

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published