Trape: Easily Track People On Internet

Trape is a OSINT analysis and research tool created by Github user jofpin, which allows people to track and execute very intelligent social engineering attacks in real time.

It was created with the aim of teaching the world how large Internet companies could obtain confidential information such as the status of sessions of their websites or services and control over their users through the browser, without them knowing, but It evolves with the aim of helping government organizations, companies and researchers to track the cyber criminals.

Creator of tool – Jofpin

Benefits of the tool

• LOCATOR OPTIMIZATION: Trace the path between you and the target you’re tracking. Each time you make a move, the path will be updated, the location of the target is obtained silently through a bypass made in the browsers, allowing you to skip the location request on the victim’s side, and at the same time maintain a precision of 99% in the locator.
• One of its most enticing functions is the remote recognition of sessions. You can know where a person has logged in, remotely. This occurs through a Bypass made to the Same Origin Policy (SOP)
  Currently you can try everything from a web interface. (The console, becomes a preview of the logs and actions)
• Registration of victims, requests among other data are obtained in real time.
  If you get more information from a person behind a computer, you can generate a more direct and sophisticated attack.
• You can do real time phishing attacks
• Simple hooking attacks
• Mapping

Session recognition is one of trape most interesting attractions, since you as a researcher can know remotely what service the target is connected to.

Installation and Usage

First of all – you need to unload the tool.

git clone https://github.com/jofpin/trape.git
cd trape
python2 trape.py -h

If it does not work, try to install all the libraries that are located in the file requirements.txt

python2 -m pip install -r requirements.txt

Example of execution

python2 trape.py --url http://example.com --port 8080

Help and options

securityland:~$ python2 trape.py --help
usage: python trape.py -u <> -p <> [-h] [-v] [-u URL] [-p PORT]
                                              [-ak ACCESSKEY] [-l LOCAL]
                                              [--update] [-n] [-ic INJC]

optional arguments:
  -h, --help            show this help message and exit
  -v, --version         show program's version number and exit
  -u URL, --url URL     Put the web page url to clone
  -p PORT, --port PORT  Insert your port
  -ak ACCESSKEY, --accesskey ACCESSKEY
                        Insert your custom key access
  -l LOCAL, --local LOCAL
                        Insert your home file
  -n, --ngrok           Insert your ngrok Authtoken
  -ic INJC, --injectcode INJC
                        Insert your custom REST API path
  -ud UPDATE, --update UPDATE
                        Update trape to the latest version

Disclaimer

This tool has been published educational purposes. Trape creators said that they are totally convinced that if all of us teach how vulnerable things really are, we can make the Internet a safer place.