markdown · 3546 bytes Raw Blame History

LooseCannon

Automated scambaiting for the terminally online. Weaponizes local LLMs against the forces of digital darkness.

This tool exists for educational purposes and defensive security research. Using it will probably violate some Terms of Service. Your accounts may get banned. You've been warned.

What It Does

Turns your messaging apps into honeypots for scammers. When they message, an AI responds with maximum confusion and minimal coherence. Think of it as a Turing test in reverse.

Current Victims

  • WhatsApp Web (primary target)
  • Telegram Web (all variants)
  • Facebook Messenger (surprisingly easy)

Architecture

LooseCannon/
├── extension/          # Browser hijacking code
├── server/            # LLM wrangling service
└── personalities/     # Digital personas of varying coherence

Prerequisites

  • Ollama (for the AI brain)
  • Node.js 18+ (for the plumbing)
  • Firefox (Chrome users can wait)
  • A healthy disregard for platform guidelines

Installation

# Get the code
cd ~/Documents/GithubOrgs/zeroed-some/LooseCannon

# Install dependencies
npm install

# Start the AI
ollama pull llama2
ollama serve

# Run the server
npm start

# Load extension
npm run dev:extension

Or if you prefer the manual approach: about:debugging > Load Temporary Add-on > Select manifest.json

Operation

  1. Open your chosen messaging platform
  2. Find the LC button (you can't miss it)
  3. Pick a personality (Confused Elder is a classic)
  4. Toggle to ON
  5. Watch the magic unfold

Available Personalities

  • Confused Elder: Can't find the any key
  • Tech Support Nightmare: Knows everything, understands nothing
  • Conspiracy Theorist: It's all connected, man

Safety Mechanisms

  • Manual activation only (no rogue AI here)
  • Big red emergency stop button
  • Conversation logs (for posterity)
  • Rate limiting (to maintain plausible humanity)

Phases of Development

Phase 1: Basic infrastructure [COMPLETE] Phase 2: Multi-platform chaos [COMPLETE] Phase 3: Chrome support (eventually) Phase 4: World domination (pending)

Technical Highlights

  • Real-time scammer detection (70%+ confidence triggers alerts)
  • Human-like typing delays (150ms per word, plus random jitter)
  • Context-aware response strategies
  • Conversation state management
  • Platform-agnostic message handling

Performance Notes

  • Conversations auto-purge after 24 hours
  • Message history capped at 50 (memory is expensive)
  • Response queue prevents flooding
  • Automatic reconnection on server hiccups

Testing Your Setup

// Browser console commands for the curious

// Check load status
console.log(window.LooseCannonLoaded);

// Trigger scammer alert
browser.runtime.sendMessage({
  type: 'SCAMMER_DETECTED',
  data: { score: 0.95 }
});

Known Issues

  • Platform DOM changes will break everything
  • Too many responses = rate limiting
  • Some assembly required
  • Batteries not included

Disclaimer

This software is provided "as is" without warranty of any kind. If you lose your WhatsApp account while trolling Nigerian princes, that's on you. The authors assume no responsibility for banned accounts, angry scammers, or existential crises caused by talking to AI-powered grandparents.

Contributing

PRs welcome. Breaking changes preferred. Documentation optional.

License

MIT - Do whatever you want, just don't blame us.

Credits

Standing on the shoulders of giants in the scambaiting community. You know who you are.

View source
1 # LooseCannon
2
3 Automated scambaiting for the terminally online. Weaponizes local LLMs against the forces of digital darkness.
4
5 ## Legal Notice
6
7 This tool exists for educational purposes and defensive security research. Using it will probably violate some Terms of Service. Your accounts may get banned. You've been warned.
8
9 ## What It Does
10
11 Turns your messaging apps into honeypots for scammers. When they message, an AI responds with maximum confusion and minimal coherence. Think of it as a Turing test in reverse.
12
13 ## Current Victims
14
15 - WhatsApp Web (primary target)
16 - Telegram Web (all variants)
17 - Facebook Messenger (surprisingly easy)
18
19 ## Architecture
20
21 ```
22 LooseCannon/
23 ├── extension/ # Browser hijacking code
24 ├── server/ # LLM wrangling service
25 └── personalities/ # Digital personas of varying coherence
26 ```
27
28 ## Prerequisites
29
30 - Ollama (for the AI brain)
31 - Node.js 18+ (for the plumbing)
32 - Firefox (Chrome users can wait)
33 - A healthy disregard for platform guidelines
34
35 ## Installation
36
37 ```bash
38 # Get the code
39 cd ~/Documents/GithubOrgs/zeroed-some/LooseCannon
40
41 # Install dependencies
42 npm install
43
44 # Start the AI
45 ollama pull llama2
46 ollama serve
47
48 # Run the server
49 npm start
50
51 # Load extension
52 npm run dev:extension
53 ```
54
55 Or if you prefer the manual approach: `about:debugging` > Load Temporary Add-on > Select manifest.json
56
57 ## Operation
58
59 1. Open your chosen messaging platform
60 2. Find the LC button (you can't miss it)
61 3. Pick a personality (Confused Elder is a classic)
62 4. Toggle to ON
63 5. Watch the magic unfold
64
65 ## Available Personalities
66
67 - **Confused Elder**: Can't find the any key
68 - **Tech Support Nightmare**: Knows everything, understands nothing
69 - **Conspiracy Theorist**: It's all connected, man
70
71 ## Safety Mechanisms
72
73 - Manual activation only (no rogue AI here)
74 - Big red emergency stop button
75 - Conversation logs (for posterity)
76 - Rate limiting (to maintain plausible humanity)
77
78 ## Phases of Development
79
80 **Phase 1**: Basic infrastructure [COMPLETE]
81 **Phase 2**: Multi-platform chaos [COMPLETE]
82 **Phase 3**: Chrome support (eventually)
83 **Phase 4**: World domination (pending)
84
85 ## Technical Highlights
86
87 - Real-time scammer detection (70%+ confidence triggers alerts)
88 - Human-like typing delays (150ms per word, plus random jitter)
89 - Context-aware response strategies
90 - Conversation state management
91 - Platform-agnostic message handling
92
93 ## Performance Notes
94
95 - Conversations auto-purge after 24 hours
96 - Message history capped at 50 (memory is expensive)
97 - Response queue prevents flooding
98 - Automatic reconnection on server hiccups
99
100 ## Testing Your Setup
101
102 ```javascript
103 // Browser console commands for the curious
104
105 // Check load status
106 console.log(window.LooseCannonLoaded);
107
108 // Trigger scammer alert
109 browser.runtime.sendMessage({
110 type: 'SCAMMER_DETECTED',
111 data: { score: 0.95 }
112 });
113 ```
114
115 ## Known Issues
116
117 - Platform DOM changes will break everything
118 - Too many responses = rate limiting
119 - Some assembly required
120 - Batteries not included
121
122 ## Disclaimer
123
124 This software is provided "as is" without warranty of any kind. If you lose your WhatsApp account while trolling Nigerian princes, that's on you. The authors assume no responsibility for banned accounts, angry scammers, or existential crises caused by talking to AI-powered grandparents.
125
126 ## Contributing
127
128 PRs welcome. Breaking changes preferred. Documentation optional.
129
130 ## License
131
132 MIT - Do whatever you want, just don't blame us.
133
134 ## Credits
135
136 Standing on the shoulders of giants in the scambaiting community. You know who you are.