mach1982
2 min readJul 8, 2021

--

Disclaimer the following information is to be used for educational purposes only. I am not responsible for how you used this information.

Was watching a Network Chuck video about using a social engineering tool called blackeye ,link to his video . For some reason the link to the GitHub page in his video didn’t work so I did quick a google and found that there was version 2 , at this link. The tool creates fake login pages and allows you to host them on a local machine with ngrok.

I download it and as with a lot of hacking tools you sometimes come across teething problems. It wasn’t outputting the ngrok.io URL for the victim to click on.

I did a bit of searching I found out that I just had to edit blackeye.sh bash script.

As root, find and edit the file.

Find the checkfound() function near the end and above it add

link=$(curl -s -N http://127.0.0.1:4040/api/tunnels | grep -o “https://[0-9a-z]*\.ngrok.io")

after

link=$(curl -s -N http://127.0.0.1:4040/status | grep -o “https://[0-9a-z]*\.ngrok.io")

The file should look like

Save and run sudo bash blackeye.sh

--

--