EVILHack :: Social Engineering tool

A Python based Socail Engineering tool for QRL Jacking Whatsapp and Tiktok user accounts.

---

🔬 System Overview & Mechanism (QRLJacking)

EVILHack serves as a core technical demonstration of QRLJacking (Quick Response Code Login Jacking).

Many modern platforms (such as WhatsApp Web and TikTok) utilize QR codes as a primary method for quick, passwordless authentication. When a user scans a login QR code with their mobile app, the active session token is immediately bound to the web client.

How EVILHack Visualizes This Vector:

1. Automated Initialization: The tool runs an automated background instance of Google Chrome using Selenium.
2. Dynamic Extraction: Instead of taking focus-stealing system screenshots, EVILHack injects memory-level JavaScript loops (toDataURL) to capture raw image strings directly from the browser's active HTML5 Canvas memory pipeline.
3. Local Hosting Matrix: A native background Python server captures this real-time data and streams it instantly to custom, external HTML templates (templates/index.html and templates/tiktok.html).
4. Session Synchronization: The mirrored web panels allow developers to observe, test, and audit how live login matrix changes update dynamically across decoupled network networks.

User's can make or modify pre-existing templates according to there will and host the localhosted site for globall usage.

You can use cloudflare or localtonet (recommanded) to host the site on internet.

---

🛑 Legal & Security Disclaimer

WARNING: This tool is developed strictly for educational purposes, security research, authorized penetration testing, and defensive auditing.

Using EVILHack against targets without prior written authorization is illegal and violates computer fraud regulations. The author assumes zero liability for any misuse, damage, or legal consequences resulting from modifications or execution of this codebase. By downloading or running this software, you agree to use it exclusively in compliance with local security laws.

---

🛠️ Pre-Requisites & System Setup

Before executing the script, your host Linux system must have (recommanded) Google Chrome or Chromium installed on its global paths.

For Arch Linux:

sudo pacman -S google-chrome
# OR you can use yay 

For Ubuntu / Debian:

sudo apt update
sudo apt install google-chrome-stable

---

🚀 Installation & Execution

Follow these steps sequentially to deploy the platform environment inside an isolated Python virtual environment:

1. Clone the Repository:

   git clone https://github.com/Unknownx007/Evilhack
   cd EvilHack

2. Initialize and Activate Virtual Environment:

   python3 -m venv venv
   source venv/bin/activate

3. Install Dependencies:

   pip install -r requirements.txt

4. Launch the Engine Interface:

   python3 main.py

5. Access the Synchronized Panels:

   • WhatsApp View:http://127.0.0.1
   • TikTok View:http://127.0.0.1

---

📝 License

Distributed under the MIT License.

MIT License<img width="757" height="306" alt="1" src="https://github.com/user-attachments/assets/ebb531a8-4a1e-4f4b-85f1-7355d64585df" />
Copyright (c) 2026 EVILHack Contributors
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.