UndeadSec/SocialFish
SocialFish
SocialFish ist ein Tool zum Credential-Harvesting und ein Phishing-Framework, das darauf ausgelegt ist, Benutzernamen, Passwörter und Zwei-Faktor-Authentifizierungscodes über täuschende Webseiten abzufangen. Es fungiert als Social-Engineering-Plattform und Informationsbeschaffungstool, das für Sicherheitsforschung und Penetrationstests verwendet wird.
Das System nutzt einen Reverse-Proxy, um Netzwerkverkehr zu tunneln und HTTP-Anfragen sowie Sitzungscookies in Echtzeit zu erfassen. Es verfügt über ein Live-Operator-Panel zum Abfangen von Einmalpasswörtern und nutzt browserbasiertes Klonen, um Authentifizierungsseiten zu replizieren.
Die Plattform bietet Funktionen zur Überwachung von Phishing-Kampagnen, einschließlich der Verfolgung von IP-Adressen der Opfer, Geolokalisierung und Geräte-Fingerprints. Sie enthält zudem Tools zur Verwaltung von Klon-Vorlagen und zum Senden von Echtzeit-Webhook-Benachrichtigungen, wenn Anmeldedaten erfasst werden.
Features
- MITM Phishing Frameworks - Implements a complete phishing framework combining reverse proxying with real-time credential capture and 2FA bypass.
- Credential Interception - Intercepts usernames, passwords, and session cookies from submitted forms and browser storage.
- Credential Collection - Deploys deceptive social engineering pages to gather sensitive login information and personal data.
- Page Cloning - Implements automated browser sessions to scrape and replicate target authentication pages for social engineering lures.
- Reverse Proxy Tunneling Tools - Uses a reverse proxy to tunnel network traffic, allowing the interception and modification of data between the victim and the target site.
- Traffic Proxying - Tunnels remote traffic through a reverse proxy to intercept and analyze HTTP requests and responses.
- Phishing Proxies - Utilizes a transparent reverse proxy to tunnel network traffic and intercept HTTP requests and session cookies.
- Credential Harvesting Simulations - Provides a framework for mimicking login portals to capture usernames, passwords, and 2FA codes.
- MITM Credential Harvesters - Employs a reverse proxy to intercept and log credentials from proxied traffic in real-time.
- Multi-Factor Authentication Bypass Testing - Intercepts one-time passwords and session cookies in real time to overcome two-factor security measures.
- Session Hijacking - Intercepts and logs HTTP cookies and form inputs to steal active authentication tokens from client browsers.
- Social Engineering Simulations - Creates deceptive login pages to simulate phishing attacks and test human vulnerabilities in security.
- MFA Interception - Captures one-time passwords in real-time via a live operator panel to bypass multi-factor authentication.
- Deceptive Pages - Duplicates modern authentication pages to create deceptive lures designed to trick users into revealing credentials.
- Simulation Platforms - Offers a comprehensive platform to deploy deceptive lures and track victim activity, including geolocation and device fingerprints.
- Proxy-Based Phishing Campaign Deployers - Manages pre-configured page layouts and capture settings in a database for rapid deployment of proxy-based phishing campaigns.
- UI Cloning Templates - Allows storing and reusing specific cloning configurations as templates for subsequent targeted campaigns.
- Operator Panels - Provides a live operator panel to manually intercept two-factor authentication codes as they are submitted by victims.
- Traffic Interception - Uses a reverse proxy to monitor and analyze HTTP requests and responses from targeted remote users.
- Information Gathering Tools - Harvests data from targets through simulated attacks to support security research and penetration testing.
- User Activity Monitoring - Logs IP addresses, geolocation, and device fingerprints to monitor how users interact with phishing lures.
- Phishing Session Monitors - Tracks victim metadata, including IP addresses and geolocation, to analyze the success of social engineering lures.
- Offensive Security Tools - Phishing and information collection framework.
- Social Engineering - Tool for capturing credentials via social engineering.
- Social Engineering Tools - Phishing framework for social media credential harvesting.
