Automated scambaiting for the terminally online. Weaponizes local LLMs against the forces of digital darkness.
This tool exists for educational purposes and defensive security research. Using it will probably violate some Terms of Service. Your accounts may get banned. You've been warned.
Turns your messaging apps into honeypots for scammers. When they message, an AI responds with maximum confusion and minimal coherence. Think of it as a Turing test in reverse.
- WhatsApp Web (primary target)
- Telegram Web (all variants)
- Facebook Messenger (surprisingly easy)
LooseCannon/
├── extension/ # Browser hijacking code
├── server/ # LLM wrangling service
└── personalities/ # Digital personas of varying coherence
- Ollama (for the AI brain)
- Node.js 18+ (for the plumbing)
- Firefox (Chrome users can wait)
- A healthy disregard for platform guidelines
# Get the code
cd ~/Documents/GithubOrgs/zeroed-some/LooseCannon
# Install dependencies
npm install
# Start the AI
ollama pull llama2
ollama serve
# Run the server
npm start
# Load extension
npm run dev:extensionOr if you prefer the manual approach: about:debugging > Load Temporary Add-on > Select manifest.json
- Open your chosen messaging platform
- Find the LC button (you can't miss it)
- Pick a personality (Confused Elder is a classic)
- Toggle to ON
- Watch the magic unfold
- Confused Elder: Can't find the any key
- Tech Support Nightmare: Knows everything, understands nothing
- Conspiracy Theorist: It's all connected, man
- Manual activation only (no rogue AI here)
- Big red emergency stop button
- Conversation logs (for posterity)
- Rate limiting (to maintain plausible humanity)
Phase 1: Basic infrastructure [COMPLETE] Phase 2: Multi-platform chaos [COMPLETE] Phase 3: Chrome support (eventually) Phase 4: World domination (pending)
- Real-time scammer detection (70%+ confidence triggers alerts)
- Human-like typing delays (150ms per word, plus random jitter)
- Context-aware response strategies
- Conversation state management
- Platform-agnostic message handling
- Conversations auto-purge after 24 hours
- Message history capped at 50 (memory is expensive)
- Response queue prevents flooding
- Automatic reconnection on server hiccups
// Browser console commands for the curious
// Check load status
console.log(window.LooseCannonLoaded);
// Trigger scammer alert
browser.runtime.sendMessage({
type: 'SCAMMER_DETECTED',
data: { score: 0.95 }
});- Platform DOM changes will break everything
- Too many responses = rate limiting
- Some assembly required
- Batteries not included
This software is provided "as is" without warranty of any kind. If you lose your WhatsApp account while trolling Nigerian princes, that's on you. The authors assume no responsibility for banned accounts, angry scammers, or existential crises caused by talking to AI-powered grandparents.
PRs welcome. Breaking changes preferred. Documentation optional.
MIT - Do whatever you want, just don't blame us.
Standing on the shoulders of giants in the scambaiting community. You know who you are.