snoop

TCC restricts access to the device camera and microphone to protect user data from unauthorized access.

But... If you trusted your browser with your microphone or camera, Snoop can show you how a man-in-the-browser attack can secretly be recording you.

Usage

If you don't have VOODOO installed

$: sudo gem install get-voodoo

OR

$: gem install get-voodoo --user-install

When installation without sudo make sure that /Users/[user]/.gem/ruby/[version]/bin is in your PATH.

Clone or download the repository, and run the voodoo template command.

$: git clone git@github.com:breakpointHQ/snoop.git

Recording audio

$: voodoo template ./snoop -o play.webm

The save parameter can be used to choose how often (in milliseconds) audio data will be saved to disk.

$: voodoo template ./snoop -o play.webm --params save:1000

Taking a picture

$: voodoo template ./snoop/camera -o you.jpg

The size parameter can be used to set the size in pixels of the captured picture.

$: voodoo template ./snoop/camera -o you2.jpg --params size:1000

Legal Disclaimer

Usage of this code for attacking targets without prior mutual consent is illegal. It's the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. Only use for educational purposes.