htr-tech/zphisher
Zphisher
Zphisher is a security testing framework designed for conducting authorized social engineering assessments and penetration testing. It functions as a credential harvesting simulator that enables security professionals to evaluate organizational defenses and user awareness by deploying deceptive login interfaces.
The platform automates the creation of realistic web pages through dynamic template rendering and provides tools to mask destination addresses. It integrates reverse proxy tunneling to expose local testing services to the public internet, allowing for remote access during security audits without requiring modifications to network firewall configurations.
The tool supports the simulation of credential harvesting attacks to measure vulnerability within authentication workflows. It is packaged to ensure consistent execution across different host environments, facilitating the deployment of controlled testing infrastructure for security awareness training.
Features
- Attack Simulations - Tests organizational defenses against social engineering through automated link generation and traffic redirection.
- Penetration Testing Platforms - Evaluates user awareness by creating realistic login interfaces and tunneling local services to the internet.
- Phishing Attack Tools - Provides a platform for conducting authorized social engineering assessments via deceptive login pages and URL masking.
- Phishing Page Generators - Creates realistic web interfaces designed to capture user credentials for authorized security assessments.
- Penetration Testing Frameworks - Automates the deployment of deceptive web interfaces and link redirection tools for security control evaluation.
- Security Testing and Auditing - Conducts controlled social engineering exercises to identify weaknesses in authentication workflows and user awareness.
- Social Engineering - Automated phishing tool with multiple templates.
- Local Tunneling Services - Routes traffic from the public internet to local development environments using secure tunneling services.
- Remote Access Proxies - Routes traffic from public internet endpoints to local services via secure reverse proxy tunnels.
- Service Exposure - Exposes local web services to the public internet through secure tunnels for remote testing.
- Request Interception Middleware - Intercepts and logs incoming HTTP form submissions to record user input within a controlled testing environment.
