How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Phishing Campaign Toolkit
The main features of securestate/king-phisher are: Offensive Security, Phishing Defense and Awareness, Security And Forensics, Social Engineering, Social Engineering Tools.
Open-source alternatives to securestate/king-phisher include: kgretzky/evilginx2 — Evilginx2 is a man-in-the-middle phishing framework designed to proxy authentication traffic between a user and a… ryhanson/phishery — An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector. drk1wi/modlishka — Modlishka is a man-in-the-middle reverse proxy framework designed for automated phishing campaigns. It dynamically… fireeye/reelphish — This tool has been released along with a FireEye blog post. The blog post can be found at the following link:… ring0lab/catphish — CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM. s0md3v/xsstrike — XSStrike is an automated security scanning engine designed for web application discovery, input.
This tool has been released along with a FireEye blog post. The blog post can be found at the following link: https://www.fireeye.com/blog/threat-research/2018/02/reelphish-real-time-two-factor-phishing-tool.html
Evilginx2 is a man-in-the-middle phishing framework designed to proxy authentication traffic between a user and a target web service. By acting as a reverse proxy, the tool intercepts and relays web requests to capture credentials and session tokens in real time, enabling the bypass of multi-factor authentication mechanisms through session cookie hijacking. The platform distinguishes itself by integrating infrastructure orchestration with modular template-driven content injection. It automates the deployment of proxy servers, manages the lifecycle of encryption certificates, and applies conte
Modlishka is a man-in-the-middle reverse proxy framework designed for automated phishing campaigns. It dynamically generates valid TLS certificates for target domains, aggregates traffic from multiple domains through a single proxy, and injects custom scripts into proxied responses. The framework operates transparently without requiring client-side certificate installation and relays two-factor authentication steps to capture secondary verification tokens. What sets Modlishka apart is its ability to automate the entire credential theft process. It logs all form submissions, headers, and cooki
CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM.