Video Summary - Termux Full Course | From Basics to Advance || in 1 Hours

Educational disclaimer / ethical framing

The video repeatedly frames its content as for educational purposes only, emphasizing legal and ethical use. It presents many scenarios in the form of “how attackers do X” and “how to defend against it,” but includes practical-style demos throughout.

Note: Some described demos are explicitly labeled as illegal without permission.

Course scope / what the video says you’ll learn

How to install Termux (Tmux in subtitles) correctly
Information gathering on targets, including:
- Finding or using target location (via link-based consent)
- Finding IP address / approximate location
- Finding information from:
  - Phone numbers
  - Email addresses
WiFi hacking / WiFi password compromise concepts + WiFi security
Network scanning, including tools/packages setup in Termux
Hacking demos and defensive mitigations, including:
- Credential/phishing-style attacks (Instagram / “followers” scam)
- Location tracking
- Camera/file exfiltration (camera & “photos received” demos)
WiFi scanning with Termux tools
Port scanning and interpreting open ports/services
CCTV exposure scanning (finding a camera service via ports)
Mitigations for WiFi and general account security
Practical defenses: strong passwords, encryption settings, disabling risky router features, etc.

Termux installation / initial setup (tutorial steps)

The presenter guides installing apps from Termux via the Play Store (subtitles mention selecting the correct install entry). Inside Termux, commands shown include:

apt update
apt upgrade
clear

Tooling mentioned includes:

pip / pip3 usage (installing Python packages)
pkg install for multiple packages (subtitles reference tools like PHP, wget, git)

Information gathering demos (OSINT concepts)

Email recon via temporary email

The demo uses a Holey/Holey tool (subtitles also mention Tempmail). The conceptual flow:

Generate/use a temporary email
Run an email-scanning tool to find where the email is registered across the internet
Display “green” results listing domains (examples mentioned include Amazon, Codeacademy, Instagram/Facebook, etc.)

Takeaway: an attacker could use OSINT to map an email to websites/accounts.

Phone number → associated info

The video claims phone numbers can be used to find associated emails/accounts. It mentions SpiderFoot, described as capable of identifying IP addresses / phone numbers.

Subtitles emphasize legality/permission even while showing attacker-style workflow.

Location tracking via link click (consent-based)

The video describes a scenario where:

A target clicks a link
A location permission prompt appears
If the victim grants location permission, location data can be sent to attacker-controlled infrastructure

It also claims some “location tools” are restricted (“not available to the general public”) without much detail.

Hound tool demo (web server + QR/link delivery workflow)

The presenter installs and runs a tool called Hound:

Clone a repository using git clone
Inspect files (e.g., ls, cd Hound)
Run a script using a bash-like command

The tool includes an option like Cloudflare Tunnel (the demo chooses “N” in subtitles).

Workflow described:

Start a PHP server on a localhost port (subtitles mention ports such as 8080 / 8000 / 3333)
Generate a public link and QR code
The “target” opens the link:
- The victim receives a prompt requesting access/permission (location shown as requested)
- The attacker terminal shows captured results (coordinates hidden in subtitles)
Stop capture with Ctrl + C

Camera / photo capture style demo (tool-assisted)

Subtitles claim an attacker can access a victim’s camera/photos via a link-based method, explicitly labeled illegal without permission.

Tooling described:

Clone/install CamFish (git clone, then cd CamFish)
Run a bash script (subtitles include bash ...)
Choose port forwarding / template options
Create a public link + QR

Demo flow:

Victim opens the link (decoy/“online meeting” style page)
Captured files arrive in the attacker’s tool directory
Subtitles mention “cam file received” and listing .png files
A Python-based web server is mentioned for viewing images (subtitles reference pythonanywhere.com-style hosting and port combinations)

Mitigations for camera/OTP + account compromise

Screen sharing / OTP safety advice

Use DND (Do Not Disturb) to reduce notification visibility during screen share
Only share screens with trusted people

OTP handling warnings

Avoid showing OTPs via notification popups or screenshots
Don’t allow others to access your device during logins/password resets

Phishing / credential theft concept (Instagram followers scam)

The video describes a phishing/scam workflow:

Attacker provides a “free followers / blue verified” link
Victim enters username/password into a fake page
Attacker captures credentials (subtitles show extracted username/password in Termux)

Defensive guidance:

Don’t click unknown URLs, even if sent by “friends”
Use skepticism about “wrong credentials” behavior as an example (subtitles show entering a wrong password)
General anti-phishing caution

WiFi security & attack concepts

Network model: public IP vs private IP vs MAC address

The video explains:

Router-assigned private IP ranges (subtitles reference 192.168.0.1 / 192.168.0.x-style conventions)
MAC addresses don’t change (as stated in subtitles)
The default gateway is typically the router’s IP

Handshake capture and cracking (conceptual explanation)

At a high level, the described concept is:

Scan WiFi and identify connected devices
Use DoS to disconnect clients
When clients reconnect, capture a handshake
Crack the password offline using a wordlist/list approach

It also mentions WiFi password leakage by sharing credentials with an untrusted person.

WiFi password exposure via apps

The video demonstrates WiFi Map:

Shows nearby WiFi SSIDs
Claims it can reveal passwords (or auto-detect them)
Requires Location permission for scanning

It also includes claims about illegality/permission issues when using such data to access networks.

Network scanning in Termux (Nmap-like concept using tools)

The presenter installs a network scanning tool (subtitles reference pkg install nmap / “map tool” wording).

Typical shown steps:

Get local IP (subtitles reference an ifconfig-like step)
Determine router subnet (scan by replacing the last octet)
Scan to discover connected devices (shows multiple LAN IPs)

Result interpretation includes:

Identifying the router via default gateway observation
Attempting to find router admin panel
- Subtitles reference default credentials like “admin/admin” or “admin password”

Port scanning and service identification

Open ports are described using an analogy like “doors/windows”:

More open ports/services → more attack surface

A demo-style approach:

Run a scanner command against an IP target
Subtitles show results including TCP and discovered service names

The concept is that scanning helps infer which systems/services may be exploitable.

CCTV scanning demo (service enumeration)

Demo approach:

Scan a local network range
Identify IPs with relevant open ports
Attempt access to a CCTV admin panel using default username/password (e.g., “admin/admin password” concept)

The subtitles emphasize permission and imply the presenter’s own equipment was used.

Defensive mitigations for WiFi (explicit checklist)

The subtitles list router/device protections:

Use a strong WiFi password (complex + symbols)
Enable WPA3 encryption
Change router default credentials
Disable SSID broadcasting (hide SSID)
Keep router firmware updated
Use MAC address filtering (allow-list)
Enable/use a guest network for visitors
Monitor router logs
Disable WPS (to prevent brute force)
Enable firewall rules on router/device
Regularly scan your network (examples: Fing), remove unknown devices

Main speakers / sources (as stated/implicit in subtitles)

Presenter

A “friends”-addressed YouTube creator (no specific name provided in subtitles)

Tools/APIs mentioned

Termux
SpiderFoot (OSINT)
Hound (link/QR + capture demo)
Tempmail (temporary email)
CamFish (camera/photo capture demo)
WiFi Map (nearby WiFi/password display demo)
Cloudflare Tunnel (optional tunnel feature)
Fing (network scanning/defensive scanning)

Termux Full Course | From Basics to Advance || in 1 Hours

Key takeaways