Technical Architecture

Centralized Control

Universal launcher provides single-point access to all framework modules with intelligent dependency resolution.

Advanced Cloning

Dual-engine cloning system combining Python and wget for comprehensive website replication.

Credential Processing

Automated harvesting with structured JSON output and organized storage by target.

Core Components

Scarface/
├── main.py # Framework launcher
├── Harvest/ # Credential server
│ ├── main.py # Flask-based server
│ └── sites/ # Hosted clones
├── Scarface-Cloner/ # Cloning engine
│ └── main.py # Dual-engine cloner
├── expose/ # Tunneling solutions
│ ├── cloudflared.py # Recommended
│ ├── localtunnel.py
│ └── ngrok.py
├── credentials/ # Harvested data
│ └── [target]/
│ └── result.json
├── sites/ # Cloned assets
│ └── [target]/
│ └── index.html
└── .banner.txt # Custom framework branding

Tunneling Implementation

Cloudflared

Primary tunneling solution offering automatic HTTPS, firewall bypass, and reliable connections without authentication requirements.

# Key advantages:
- Zero-configuration setup
- No rate limits
- Persistent tunnel URLs
- Native HTTPS support
- Enterprise-grade reliability

Alternative Options

Secondary tunneling methods provided for flexibility:

Ngrok: Requires API key but offers custom domains
LocalTunnel: Simple setup with random subdomains

Note: These alternatives may require additional configuration and lack the reliability of Cloudflared.

Module Specifications

Harvest Server

Flask-based web server designed to:

Host cloned sites locally
Capture submitted credentials
Log data to structured JSON files
Organize results by target

Cloner Engine

Advanced website replication featuring:

Python-based DOM parsing
wget mirroring fallback
Automatic asset collection
Form action rewriting

Exposure System

Integrated tunneling with:

Automated Cloudflared setup
Ngrok API integration
LocalTunnel compatibility
Public URL generation