Making a geolocation deanon

[Carding]

We will need for this case - the utility + the victim's click on our pre-prepared link.

Seeker is a utility that sets up the website on the Apache web server and using Ngrok creates a link clicking on which will be requested access to the geolocation, in case such access is granted, we receive the device's data is accessed and the coordinates of this device, in addition to immediately formed a link to Google Maps with a marker on the location of the device.

Link to github - https://github.com/thewhiteh4t/seeker

Now let's see how it works. Installing Seeker:

git clone https://github.com/thewhiteh4t/seeker.git
cd seeker/
chmod 777 install.sh
./install.sh

And launch:

python3 seeker.py

Immediately after launching, Seeker will generate a link and wait for someone to click on this link

When we click on the link, we will see a site with an offer to search for friends around.

When you click the "Continue" button, the site will ask for permission to access geolocation, and as soon as such access is obtained, Seeker will show detailed data about the device and its location.

You will see: operating system data, browser version, country, region, city, and provider name, as well as longitude, latitude, location accuracy, altitude, and a link to Google Maps to visually see the location of certain coordinates.

Regarding the accuracy of detection: it detects desktop computers (and laptops) with an accuracy of 10-15 meters, Android phones-10-20 meters, iphone-60-70 meters

As you can see, the program works quite efficiently, it remains only to hand the person a link so that he does not suspect anything, but then everything will depend on your imagination and social engineering skills, and the program will do everything else itself.

This article is written for informational purposes only. We do not encourage you to do anything, but only tell you how to protect yourself from such actions on the part of intruders. We are not responsible for any harm caused to anyone or anywhere. If you decide to repeat any illegal actions, we recommend that you carefully set up comprehensive anonymity.

 

[Carding]

How to replace your actual location for apps on your phone​

Content:

• Enabling developer options
• Program for spoofing the GPS signal
• Removing the "for developers" item from the menu

If you need your phone and its programs to think that you are in a different location than your actual location, then this article will tell you how to spoof GPS.

Among the programs that use the current GPS value and that can be deceived by this instruction are:

• various services that show objects directly near you
• a camera that records fake location values in the photo metadata
• apps that show your coordinates or location on the map
• social networks, with the "check-in" function - you can check in anywhere in the world

By the way, we don't need root rights for this!

We tested the functionality of this method on Android 4.2.1. in General, the method is very simple and after setting it up, you can set your fake location on your phone with just two clicks.

Enabling developer options
We need to allow the firmware to use a fake location – this option is not available in the normal settings menu, to get to this option, you need to activate the "Developer" mode. To do this, go to "About phone" in the settings (usually this is the lowest item in the Settings) and click "build Number" seven times.

After the first two clicks, a small pop-up window will appear that says: "You are ... steps away from becoming a developer."

The item "About phone", depending on the phone model, may be called "about device", and there may also be an additional intermediate item "software Information" this is where you need to look for the "build Number".

Now you will see the item "{ } for developers" in the main settings menu.

Go to it and put a check mark on the item "Dummy locations".

Disable the GPS sensor in your phone's settings.

Program for spoofing the GPS signal
Install [URL='https://play.google.com/store/apps/details?id=com.lexa.fakegps]the Fake GPS location program[/URL] (available in the Play Store).

Open it and select any location on the map:

You can use search to enter the desired location, or move the map around to find what you need.:

When you check the box, tap the green button at the bottom right of the screen.

The program will immediately start working and collapse itself. You can access it in the list of recently launched apps by clicking on its icon or from the curtain.:

To stop spoofing your location, click on the Pause button in the curtain, or go to the program and click the button at the bottom of the left part of the screen:

While the program is running, all apps on your phone will think that you are exactly where you indicated on the map. In the relevant programs and services, you can search for people or attractions in any area.

Removing the "for developers" item from the menu
You can remove developer options, but only for certain phones. For most models, the only way to remove this item from the menu for sure is to reset the phone to factory settings.

Certain models (for example, HTC One (M8) with stock Android) allow you to remove this item from the options without a full reset, owners of, for example, Galaxy S5 and LG G3 will either have to live with this item or do a full reset (wipe) of the phone.

Go to Settings -> Apps ->Settings and tap on "Erase data". This method can work on different phones and tablets.

To determine the location where the photo was taken, you can use this free service https://suip.biz