HiddenEye: A Phishing Simulation Tool With Advanced Features

July 27, 2019

HiddenEye is an open-source project historically known for its phishing simulation features, customizable interface, mobile-platform support, and collection of web page templates. It was designed to demonstrate how deceptive login pages and social-engineering techniques can put online accounts at risk.

The project has advertised features such as mobile-compatible pages, customizable themes, URL options, and collection of connection metadata. Because the original project and its dependencies may be outdated, verify the repository, compatibility, and security implications before attempting to run it.

Security notice: Use phishing simulations only in an authorized lab or engagement with informed participants and appropriate safeguards. Do not collect real passwords, authentication tokens, or keystrokes from unsuspecting users.

Key Features

Mobile Compatibility

HiddenEye was designed to offer web page templates that could be displayed on mobile devices as well as desktop browsers. Actual compatibility depends on the individual template, browser, and the age of the code.

Phishing Simulation Templates

The original project advertised a broad selection of login-page templates resembling popular online services. Such templates can illustrate how visual imitation and misleading URLs influence user decisions during security-awareness exercises.

For legitimate training, use clearly controlled demonstration pages and test accounts rather than collecting credentials from real services.

Connection Metadata

The project advertised the ability to display information associated with incoming connections, including IP addresses and approximate geographic or network information. These values are not necessarily precise: VPNs, proxies, mobile networks, and IP-geolocation databases can affect the results.

Keylogging Claims

Some versions advertised a keylogging option. Capturing keystrokes can expose passwords, private messages, and other sensitive information. This functionality should not be enabled against unsuspecting users. Security-awareness exercises can instead use synthetic input and record only the minimum event data required to evaluate the exercise.

Custom Themes and URL Options

Historical feature descriptions mention customizable application themes and options for generating custom or random URLs through supported tunneling services. Availability depends on the specific version and whether its external services still work.

Operating Systems and Compatibility

Historical documentation listed the following environments as tested or supported:

Kali Linux Rolling Edition
Parrot OS Rolling Edition
Linux Mint 18.3 Sylvia
Ubuntu 16.04.3 LTS
macOS High Sierra
Arch Linux
Manjaro XFCE 17.1.12
BlackArch Linux
Android environments using UserLAnd or Termux

Compatibility warning: These are historical platform claims, not confirmation that HiddenEye runs on current operating systems. Older Python packages, PHP dependencies, Android terminal environments, and third-party URL services may no longer work as documented.

Prerequisites

The original installation instructions referenced the following dependencies:

Python 3
Python package dependencies, including the historically referenced wget package
PHP
Git
Appropriate system permissions

Install dependencies only from sources you trust, inspect the project’s code before execution, and use an isolated virtual machine or disposable test environment. Avoid running unfamiliar scripts with administrator privileges unless there is a verified requirement.

Installation and Source Code

The original project repository was published by DarkSecDevelopers. Its historical documentation described cloning the source and installing Python requirements, but these steps should not be assumed to work with current systems.

Repository: HiddenEye on GitHub

Before using the repository, review its maintenance status, source code, dependency files, open issues, and any available security advisories. Do not run an old installation script blindly or use broad permissions such as chmod 777 when narrower permissions would suffice.

Android Support: UserLAnd and Termux

Historical instructions described two Android approaches:

UserLAnd: Runs a Linux environment in user space, allowing selected Linux command-line tools to be used without rooting the device.
Termux: Provides a terminal environment and package manager for Android. Package availability and compatibility depend on the installed Termux version and the project’s dependencies.

Neither approach guarantees that an older Python application will run successfully on a current Android device. For safe testing, use a local demonstration page and synthetic data, and avoid exposing a test service to the public internet.

Historical Template Coverage

The original project advertised templates associated with a range of online platforms. The list below summarizes the historical coverage without treating the templates as verified or currently functional.

Social networking: Facebook, Instagram, LinkedIn, Twitter, Snapchat, VK, MySpace, and Badoo.
Email and identity: Google, Yahoo, Microsoft, iCloud, Proton Mail, and Yandex.
Developer platforms: GitHub, GitLab, Stack Overflow, and WordPress.
Entertainment and gaming: Twitch, Steam, Netflix, Spotify, and Origin.
Commerce and file storage: PayPal, eBay, Shopify, Dropbox, Adobe, and Verizon.
Other services: Pinterest, Quora, DeviantArt, and cryptocurrency-related pages.

The repository’s original descriptions also mentioned alternative page layouts and additional social-engineering scenarios. Availability can vary by branch and version, and the presence of a template does not indicate an affiliation with the service it resembles.

Locale Troubleshooting

Older Linux environments may display locale warnings if the required language settings are missing or incorrectly configured. On Debian-based systems, inspect the configured locales and enable a UTF-8 locale appropriate for your environment.

locale
locale -a

If the required locale is unavailable, consult your distribution’s official documentation for generating and selecting locales. The exact configuration steps differ between operating systems and releases; rebooting is not always necessary.

Disclaimer

HiddenEye is discussed here for cybersecurity education, defensive research, and authorized security-awareness testing. Deploying deceptive pages, collecting credentials, capturing keystrokes, or accessing another person’s information without authorization can cause harm and may violate applicable laws.

Use a controlled lab, obtain the required permission, protect test data, and follow the project’s license and applicable policies. The user is responsible for ensuring that any testing is lawful and authorized.