hangetzzu/saycheese

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1284 stars · 978 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

SayCheese is a shell-based social engineering tool that generates a malicious HTTPS page to capture webcam photos from a target who clicks a link. It uses Serveo or Ngrok port forwarding and JavaScript's MediaDevices.getUserMedia API to trick the target into granting camera access.

Use cases

• capture webcam shots from a target via a phishing link
• demonstrate social engineering risks in security awareness training
• test whether users grant camera permissions to suspicious pages
• run a red-team phishing simulation with a fake HTTPS page
• learn how getUserMedia permission prompts can be abused

When to choose

• you need a quick, script-based phishing page generator for authorized penetration tests
• you want a lightweight tool that runs on Kali Linux or Termux without dependencies
• you are demonstrating webcam permission abuse in a security training context

When to avoid

• you lack explicit authorization to test the target - using this is illegal
• you need a full-featured phishing framework with templates and tracking
• you want a maintained tool with active development and support
• you need stealth or evasion capabilities beyond a simple permission prompt

Facets

cli-tool · maturity maintenance

security penetration-testing http-server web-scraping security penetration-testing cli browser social-engineering phishing webcam shell-script ngrok serveo command-line linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="hangetzzu/saycheese")