An automated tool to hack the camera of the target and click their pics just by sharing a link.
The3rdEye spins up a decoy webpage on an integrated PHP server and punches it out to the internet using Localhost, CloudFlare Tunnel, or Localhost.run. You send the generated link to a target; if they grant camera access, their photo is captured instantly. A built-in GPS locator can also pull their physical coordinates during the session.
The tool chains three components into a single automated workflow:
- Hosting – A lightweight PHP server delivers the bait page locally.
- Tunnel Generation – The local port is exposed via multiple supported tunnel providers for public access.
- Data Harvesting – Upon user interaction and permission grant, camera frames and geolocation data are saved to disk.
3 ready-made engagement templates are bundled. New ones can be requested by opening an issue.
- 1] coming soon
- 2] coming soon
- 3] coming soon
A cleanup script is provided to wipe all captures, logs, and temporary files after use.
- Localhost
- Cloudflare
- Localhost.run
- Termux
- Kali Linux
- Ubuntu
apt-get -y install php wget unzip
git clone https://github.com/r4tur1/The3rdEye
cd The3rdEye
bash the3rdeye.sh
bash cleanup.sh
This removes all captured photos and saved location data.
The3rdEye is built for authorized penetration testing only. Misuse is on the user, not the developer.