👻 PhantomCollect

Advanced Stealth Web Data Collection Framework

🎯 Features

• 📍 Precise GPS Location Tracking
• 🌐 Public IP & Geo-Location Detection
• 💻 Complete Device Fingerprinting
• 📡 Network & Connection Information
• 🔋 Battery Status & Power Management
• 🛡️ Stealth Data Collection
• 💾 Multiple Storage Backends (SQLite, JSON)
• 📊 Real-time Terminal Display

🚀 Quick Start

Installation

pip install phantomcollect

Basic Usage

```bash
phantomcollect

From AUR (Arch Linux):

yay -S phantomcollect

Installation via BlackArch

pacman -S phantomcollect

Access the Interface

http://localhost:8080

🔧 Advanced Usage

Make it Public (Ngrok)

phantomcollect &
ngrok http 8080

Custom Port

phantomcollect --port 8081

View Collected Data

# View all collected data
sqlite3 victims.db "SELECT * FROM victims;"

# Delete all data
rm victims.db

📊 Data Collection Schema

Database Structure:

-- victims table schema
CREATE TABLE victims (
    id INTEGER PRIMARY KEY AUTOINCREMENT,
    timestamp TEXT,                    -- Visit time
    ip TEXT,                          -- Public IP address  
    user_agent TEXT,                  -- Browser/device info
    location TEXT,                    -- Geographic location
    device_info TEXT,                 -- Hardware specifications
    all_data TEXT                     -- Complete JSON data
);

JSON Data Structure:

  "timestamp": "DateTime",
  "collectedData": {
    "basicInfo": {
      "userAgent": "String",
      "platform": "String", 
      "vendor": "String",
      "appName": "String",
      "appVersion": "String",
      "language": "String",
      "languages": ["Array"]
    },
    "screenInfo": {
      "width": "Number",
      "height": "Number",
      "availWidth": "Number",
      "availHeight": "Number", 
      "colorDepth": "Number",
      "pixelDepth": "Number"
    },
    "locationInfo": {
      "timezone": "String",
      "timezoneOffset": "Number"
    },
    "networkInfo": {
      "effectiveType": "String",
      "downlink": "Number",
      "rtt": "Number",
      "saveData": "Boolean"
    },
    "batteryInfo": {
      "charging": "Boolean",
      "level": "Number",
      "chargingTime": "Number",
      "dischargingTime": "Number"
    },
    "hardwareInfo": {
      "hardwareConcurrency": "Number",
      "deviceMemory": "Number",
      "maxTouchPoints": "Number"
    },
    "privacyInfo": {
      "cookieEnabled": "Boolean",
      "doNotTrack": "Boolean",
      "pdfViewerEnabled": "Boolean",
      "webdriver": "Boolean"
    },
    "gpsError": "String",
    "publicIP": "String",
    "ipGeoInfo": {
      "status": "String",
      "country": "String",
      "countryCode": "String",
      "region": "String",
      "regionName": "String",
      "city": "String",
      "zip": "String",
      "lat": "Number",
      "lon": "Number",
      "timezone": "String",
      "isp": "String",
      "org": "String",
      "as": "String",
      "query": "String"
    }
  }
}

📁 Data Collected

Data Type Details Location GPS coordinates, IP-based location Device Hardware specs, screen info, platform Network Connection type, speed, IP address Browser User agent, languages, timezone Battery Level, charging status, timing

🕵️‍♂️ Advanced Timezone Forensics - Detects and analyzes discrepancies between system settings and browser-level timezone data, exposing true geographic origins even when users employ VPNs or attempt location spoofing through system modifications.

⚠️ Legal Disclaimer

This tool is for educational and authorized security testing purposes only. Users are solely responsible for complying with all applicable laws.

🔐 Security Features

· No external dependencies · Local data storage only · Transparent data collection notification · Educational focus

👨‍💻 Developer

xsser01 - Security Researcher

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

---

Use Responsibly. Secure Ethically.

🌐 Featured On