Storm-Breaker: A Multi‑Feature Social Engineering Penetration Tool for Red Teams

Tool Overview

Storm‑Breaker, developed by the ultrasecurity research team, is an open‑source social‑engineering framework designed for authorized enterprise penetration testing. It mimics web pages to lure target devices into interaction, enabling remote data collection for security awareness training and red‑team exercises.

Core Features

Device Information Harvesting

Collects basic device data such as operating system, browser fingerprint, and screen resolution without requiring any permissions on the target.

Real‑Time Location Tracking

For smartphone targets, obtains an approximate geographic location to help assess movement patterns.

Remote Camera Access

Generates a phishing page; once the target grants camera permission, the attacker can view the live camera feed.

Microphone Eavesdropping

After the target authorizes microphone access, the tool captures ambient audio to reveal conversations and surrounding sounds.

Technical Characteristics

Storm‑Breaker uses a mixed PHP + Python architecture and provides a visual web management panel, which is more intuitive than traditional command‑line tools.

Key improvements in the latest version include:

Upgrade from CLI to web panel for friendlier operation.

Custom domain deployment support to bypass Ngrok restrictions.

Enhanced log management with download and clear functions.

Optimized phishing templates to increase lure success rate.

Built‑in automatic Ngrok download configuration.

Supported Environments

Storm‑Breaker can be deployed on several platforms:

Kali Linux 2022+ : officially recommended.

macOS Big Sur / M1 : Apple platform support.

Android (Termux) : mobile penetration testing.

Self‑hosted server : deployment via cPanel/DirectAdmin.

Base dependencies are PHP, Python 3, Git, and Ngrok (user‑configured).

Installation and Usage

Quick deployment commands:

git clone https://github.com/ultrasecurity/Storm-Breaker
cd Storm-Breaker
sudo bash install.sh
sudo python3 -m pip install -r requirements.txt
sudo python3 st.py

Access the management panel at http://localhost:8080 using the default credentials admin / admin.

Usage Recommendations

Storm‑Breaker should only be used in lawful scenarios such as:

Authorized red‑team exercises.

Employee security‑awareness training demonstrations.

Social‑engineering phases of penetration‑testing projects.

Bug bounty programs with explicit permission.

Important reminder: Unauthorized use may violate laws; users must comply with cybersecurity regulations.