# Thief Raccoon | Login Phishing Tool **URL:** \ **Category:** Tools & Scripts\ **Tags:** programming, hacking, privacy, freebies\ **Created:** [June 10, 2024, 9:36am UTC](https://onehack.st/t/thief-raccoon-login-phishing-tool/284330 "2024-06-10T09:36:25Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![Astrid](https://onehack.st/user_avatar/onehack.st/astrid/32/174869_2.png) [@Astrid](https://onehack.st/u/Astrid)\ **Post date:** [June 10, 2024, 9:36am UTC](https://onehack.st/t/thief-raccoon-login-phishing-tool/284330/1 "2024-06-10T09:36:26Z")
![image](https://onehack.st/uploads/default/original/3X/1/e/1ef90f4847679cca00342ddffb324502978129c7.jpeg) # Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of security measures like 2FA and password management. [![Captura-de-pantalla-2024-05-23-111620](https://camo.githubusercontent.com/8ea3f89b2707b4237cf07b9446ce5dec75f68d28b75bb836702bdb5f6ac7cb47/68747470733a2f2f692e6962622e636f2f335443424c39732f436170747572612d64652d70616e74616c6c612d323032342d30352d32332d3131313632302e706e67)](https://ibb.co/L0Zn2XP) ## Features - Phishing simulation for Windows 10, Windows 11, Windows XP, Windows Server, Ubuntu, Ubuntu Server, and macOS. - Capture user credentials for educational demonstrations. - Customizable login screens that mimic real operating systems. - Full-screen mode to enhance the phishing simulation. ## Installation ### Prerequisites - Python 3.x - pip (Python package installer) - ngrok (for exposing the local server to the internet) ### Download and Install 1. **Clone the repository:** git clone [https://github.com/davenisc/thief\_raccoon.git](https://github.com/davenisc/thief_raccoon.git) cd thief\_raccoon 1. Install python venv apt install python3.11-venv 1. **Create venv:** python -m venv raccoon\_venv source raccoon\_venv/bin/activate 1. **Install the required libraries:** pip install -r requirements.txt **Usage** 1. **Run the main script:** python app.py 1. \*\*Select the operating system for the phishing simulation:\*\*After running the script, you will be presented with a menu to select the operating system. Enter the number corresponding to the OS you want to simulate. 2. \*\*Access the phishing page:\*\*If you are on the same local network (LAN), open your web browser and navigate to [http://127.0.0.1:5000](http://127.0.0.1:5000/).If you want to make the phishing page accessible over the internet, use ngrok. Using ngrok 1. **Download and install ngrok** Download ngrok from [ngrok.com](http://ngrok.com) and follow the installation instructions for your operating system. 1. **Expose your local server to the internet:** 2. **Get the public URL:** After running the above command, ngrok will provide you with a public URL. Share this URL with your test subjects to access the phishing page over the internet. **How to install Ngrok on Linux?** 1. Install ngrok via Apt with the following command: curl -s [https://ngrok-agent.s3.amazonaws.com/ngrok.asc](https://ngrok-agent.s3.amazonaws.com/ngrok.asc) \ | sudo tee /etc/apt/trusted.gpg.d/ngrok.asc \>/dev/null \ && echo “deb [https://ngrok-agent.s3.amazonaws.com](https://ngrok-agent.s3.amazonaws.com) buster main” \ | sudo tee /etc/apt/sources.list.d/ngrok.list \ && sudo apt update \ && sudo apt install ngrok 1. Run the following command to add your authtoken to the default ngrok.yml ngrok config add-authtoken xxxxxxxxx–your-token-xxxxxxxxxxxxxx **Deploy your app online** 1. Put your app online at ephemeral domain Forwarding to your upstream service. For example, if it is listening on port [http://localhost:8080](http://localhost:8080/), run: ngrok http [http://localhost:5000](http://localhost:5000) **Example** 1. **Run the main script:** python app.py 1. **Select Windows 11 from the menu:** Select the operating system for phishing: 1. Windows 10 2. Windows 11 3. Windows XP 4. Windows Server 5. Ubuntu 6. Ubuntu Server 7. macOS Enter the number of your choice: 2 1. **Access the phishing page:** Open your browser and go to [http://127.0.0.1:5000](http://127.0.0.1:5000/) or the ngrok public URL. **Disclaimer** **This tool is intended for educational purposes only. The author is not responsible for any misuse of this tool. Always obtain explicit permission from the owner of the system before conducting any phishing tests.** **License** This project is licensed under the MIT License. See the LICENSE file for details. **ScreenShots** [![Captura-de-pantalla-2024-05-23-111751](https://camo.githubusercontent.com/ded1b3545015346bb5eefa8450569dc7f75ea984771b71940169ce84b024b88b/68747470733a2f2f692e6962622e636f2f533366567a4d6b2f436170747572612d64652d70616e74616c6c612d323032342d30352d32332d3131313735312e706e67)](https://ibb.co/mcNh32n) [![Captura-de-pantalla-2024-05-23-111817](https://camo.githubusercontent.com/5e02b746df4ce42b511d3d5171605646796e349d31faf48b10752a37b04221ce/68747470733a2f2f692e6962622e636f2f3250304a5659362f436170747572612d64652d70616e74616c6c612d323032342d30352d32332d3131313831372e706e67)](https://ibb.co/tcwRjPh) [![Captura-de-pantalla-2024-05-23-111841](https://camo.githubusercontent.com/82f9f3f917cd66914c9a15909387470a3bdc887cbc7e62e4edaaa5b78d487b65/68747470733a2f2f692e6962622e636f2f6d436d777439302f436170747572612d64652d70616e74616c6c612d323032342d30352d32332d3131313834312e706e67)](https://ibb.co/KjYk72D) [![Captura-de-pantalla-2024-05-23-111900](https://camo.githubusercontent.com/9a252634699199a57e0ea454aa9c832164059b0737b57a7ed41e3cd2129c72e1/68747470733a2f2f692e6962622e636f2f7979545a6753532f436170747572612d64652d70616e74616c6c612d323032342d30352d32332d3131313930302e706e67)](https://ibb.co/Wy9MBtt) [![Captura-de-pantalla-2024-05-23-111937](https://camo.githubusercontent.com/764028cafa4e849cc31942b27c27d18b5e286ac0f33d305e629db297b04d3f1d/68747470733a2f2f692e6962622e636f2f63314b777251792f436170747572612d64652d70616e74616c6c612d323032342d30352d32332d3131313933372e706e67)](https://ibb.co/Qf7kKMJ) **Credits** Developer: @davenisc Web: [https://davenisc.com](https://davenisc.com/) ## Support If you find this project useful, you can support me on Buy Me a Coffee. [![Buy Me a Coffee](https://camo.githubusercontent.com/b3e5e0260329dd562bc41abf82ce7020df2c26448f0c1575dda9d2092e7b3bdd/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4275792532304d6525323061253230436f666665652d4646444430303f7374796c653d666f722d7468652d6261646765266c6f676f3d6275792d6d652d612d636f66666565266c6f676f436f6c6f723d626c61636b)](https://buymeacoffee.com/davenisc) ## GitHub: > **[GitHub - davenisc/thief\_raccoon: Thief Raccoon is a tool designed for educational...](https://github.com/davenisc/thief_raccoon)** > > Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of security measures like 2FA and password