XploitSPY is an Android Monitoring Tool https://mp.weixin.qq.com/s/IT5RR2bTXGlxDgt16HrxCQ
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Go to file
MAHESH KUMAR edc4e93f62
Update FUNDING.yml
2 years ago
.github Update FUNDING.yml 2 years ago
client Device admin added 3 years ago
server Bump node-fetch from 2.6.0 to 2.6.1 in /server 3 years ago
.gitignore Resolved A8+ launch bugs 3 years ago
LICENSE Updated License 3 years ago
Procfile heroku jdk fix 3 years ago
README.md Update README.md 2 years ago
app.json bug fix 3 years ago
azuredeploy.json Create azuredeploy.json 3 years ago
package.json Device admin added 3 years ago
system.properties heroku jdk fix 3 years ago


A cloud based Android Monitoring Tool, powered by NodeJS


  • GPS Logging
  • Microphone Recording
  • View Contacts
  • SMS Logs
  • Send SMS
  • Call Logs
  • View Installed Apps
  • View Stub Permissions
  • Live Clipboard Logging
  • Live Notification Logging (WhatsApp, Facebook, Instagram, Gmail and more ....)
  • View WiFi Networks (logs previously seen)
  • File Explorer & Downloader
  • Command Queuing
  • Device Admin
  • Built In APK Builder


  • Java Runtime Environment 11 or above
  • NodeJs
  • A Server with Static IP Address


  1. Install JRE 11

    • Debian, Ubuntu, Etc
      • sudo apt-get install openjdk-11-jre
  2. Install NodeJS Instructions Here (If you can't figure this out, you shouldn't really be using this)

  3. install PM2

    • sudo npm install pm2 -g
  4. Clone the repo

    • git clone https://github.com/XploitWizer/XploitSPY.git
  5. Go to server directory

    • cd XploitSPY/server/
  6. In the server directory, run these commands

    • npm install <- install dependencies
    • pm2 start index.js <-- start the script
    • pm2 startup <- to run XploitSPY on startup
  7. Find your public IP curl ifconfig.me

  8. In your browser navigate to your Server Static IP Address Ex.:

  9. Login details

    • Username : admin
    • Password : password

It's recommended to run XploitSPY behind a reverse proxy such as NGINX

Buy us a Coffee

Bitcoin : 3HwzRLbZxFVxyZzLoEHFnoB5RVKfzwxDbf

Paypal : https://paypal.me/raomk


XploitWizer Provides no warranty with this software and will not be responsible for any direct or indirect damage caused due to the usage of this tool.
XploitSPY is built for Educational Purpose. Use at your own Risk.

Made with ❤️ By XploitWizer


Credits to D3VL for the original code base this repository is based on at L3MON