GitHub RadarDual-use project

madhanmaaz/white-spikes

Automated Social Media Phishing Tool. Automated tool that allow us to hack accounts with 2FA Bypass. Primary language: JavaScript. 54 stars.

Classification confidence: lowNeeds editorial review

Mixed attack and defense signals; needs editorial review.

JavaScript54 stars14 forkspushed Oct 24, 2026GPL-3.0

Project links:Open GitHub project Back to radar

README Preview

Fetched from GitHub

WHITE SPIKES - 2.0.0 (v3 coming soon)

The Best Automatic Social Media Phishing Tool. Recall that this is solely for awareness-raising or educational purposes only. Through the use of this tool, we are able to gather and store data such as usernames, passwords, emails, OTPs, TWO-FACTOR-AUTHENDICATION BYPASSES, RESEND OTPs, etc. And store in our database for later use.

Username (email, password, mobile number, username) Bypass
Passwords Bypass
2FA (otp codes, authenticator app codes, Qr scanning) Bypass
Resend otp code Bypass
Select auth device Bypass

Disclaimer

Title: white-spikes
Copyright (c) 2024 Madhanmaaz

All rights owned by Madhanmaaz.

The "white-spikes" tool is an educational resource designed for awareness-raising and ethical purposes only.
It is free to use, but any commercial distribution or sale is restricted.
The tool is intended to be used responsibly and with the explicit permission of the relevant network administrators or owners.
The creators and copyright owners of "white-spikes" are not liable for any misuse or unauthorized use of the tool.

For educational and awareness-raising purposes only. Unauthorized use is prohibited.

DEMO VIDEO

https://github.com/madhanmaaz/white-spikes/assets/120784875/ce15e65b-0d8a-4f49-baac-d04cc5464ef2

Image: banner

Contact info

Instagram

Website

Requirements

Nodejs

Installation

Install WHITE SPIKES with GIT

git clone https://github.com/madhanmaaz/white-spikes

cd white-spikes

Install Dependencies

npm install

Run - The default port is 3411

npm run start

To run in server

npm run headless

http://localhost:3411 Open on your browser

USER-INTERFACE

Image: userinterface

Change the default username and password of whitespikes.

Default username : admin
Default password : admin

Image: admin-setting

Create

Image: create

Panel

Image: panel

Updates

SERVER CAPABILITY: Run on a Windows server (only).
CREATOR: Create the target instance.
PANEL: In version 2, there is a separate panel for each target.
RESPONSE TO TARGET: Custom response page.
DOWNLOAD COOKIES: Download cookies option, access account from another white-spikes application.
FORCE COOKIES: When the hijack is complete, you can force the cookies to save properly.
SCREENSHOT: Screenshot for a headless browser.
OPEN BROWSER WITH COOKIES: Here you can upload your cookie file, target-id.wszip.