Seeker

Hosts a fake page that asks visitors for location permission, then reports their coordinates and device detail

Stars: 10.2k
Forks: 2.3k
Licence: MIT
Language: CSS
Last update: 6 days ago
Type: Other

What it is

Seeker is a proof-of-concept tool that runs a fake website asking the visitor for location permission. If the visitor allows it, the tool records latitude, longitude, and accuracy from the phone's GPS, along with device and browser details. The README says it exists to show what a malicious site can collect, and warns people not to click random links or grant critical permissions.

Run the local server and send a tunnel link to a test device to see what location and device data is captured
Export captured coordinates to a KML file for viewing in Google Earth using the -k option
Choose a built-in template such as NearYou or Telegram to test a specific page design
Send captured events to a Telegram bot or webhook using the --telegram or --webhook options

Great for

Security students studying how location permission abuse works
Security researchers testing their own devices and privacy settings
Educators demonstrating social engineering risks to a class
People who want to see what data a web page can read from their device

Not ideal for

Anyone wanting to locate or track another person without consent, since the README frames it as educational and this use is unlawful in most places
Users who need IP-based geolocation, because the README says Seeker is more accurate than IP lookup and that approach is different
Laptop-only users, because the README says laptops lack the GPS hardware Seeker relies on

Step-by-step guide: how to use SeekerInstall, first run, examples, tips and FAQs

How to get it

1
Clone and build from source
You'll need: Python 3 · git
Clone the repository
git clone https://github.com/thewhiteh4t/seeker.git
Enter the folder
cd seeker/
Make the installer executable
chmod +x install.sh
Run the installer
./install.sh
2
Run it
- Run python3 seeker.py in one terminal to start the web server
- Start a tunnel such as ngrok http 8080 in a second terminal
- Open the generated link on a test device you own and allow location when asked
- Review the captured data shown in the terminal
3
Get the most out of it
- Use -p to pick a custom port and match it in your tunnel command
- Use -t to pre-select a template so you skip interactive setup
- Use -k to save results as a KML file for Google Earth
- Use the environment variables listed in the README to run without interactive prompts, for example in Docker

Downloads

Source code (.zip)master branch · straight from GitHub

Strengths

Clear README that states it is a proof of concept for education
Supports several templates and a documented way to create new ones
Runs on Linux, macOS, Termux, and Docker, per the README

Trade-offs

Accuracy depends on device GPS, browser behavior, and calibration, as the README notes
Only useful when the target grants location permission, and the README says some devices or browsers block scripts
Its purpose is surveillance-style data collection, so using it on people without consent is a serious ethical and legal problem

How it compares

Project	Stars	Type	Level	Updated	Best for
seeker (this)	10.2k	Other	intermediate	6 days ago	Security students studying how location permission abuse works
sherlock	95.4k	CLI	intermediate	4 days ago	Security researchers doing authorized open-source intelligence work
subfinder	14.7k	CLI	intermediate	4 days ago	Security testers doing reconnaissance on a domain they are authorized to test
OSINT-Framework	12.4k	Learning resource	beginner	6 days ago	Researchers looking for a starting point to find free public-information tools

Stats synced from GitHub. The assessment above was drafted with AI from the project's README on 2026-10-29 and may miss recent changes — check the README before relying on a command. MIT licence: free to use, modify and distribute, including commercially, as long as you keep the copyright notice.