Whatsapp Phish

I've written this as a proof of concent without checking to see if there are already available PoC projects written.

After writing this, I found out that there are indeed PoCs like this and this.

Anyhow, I've only found out about it after writting this.

I've created it using the elixir language together with the Phoenix framework.

The difference between this project and others is that this project will spin up a genserver process, to continually scrape the whatsapp web's QR code and pushes it via a socket to the client to continually get the most updated QR code.

They say pictures means a thousand words, so here's a picture(diagram):

Overview

To start your own whatsapp phishing server:

  • Install dependencies with mix deps.get
  • Install Node.js dependencies with cd assets && npm install
  • Start a webdriver server, instructions can be found here
  • Start Phoenix endpoint with mix phx.server

Now you can visit localhost:4000 from your browser.

Ready to run in production? Please check our deployment guides.

Learn more