Ignitetch/AdvPhishing
AdvPhishing
AdvPhishing is a tool for social engineering simulations and credential harvesting testing. It generates deceptive web interfaces, including cloned service provider pages and pre-made layouts that mimic payment and social media platforms, to capture user login details.
The tool manages the end-to-end deployment of phishing campaigns by routing captured credentials to a specified email address via an integrated SMTP mail delivery mechanism. It includes utilities for exposing a local development server to the public internet through secure tunneling and redirects users to legitimate third-party destinations after data capture to hide deceptive activity.
Broad capabilities cover deceptive page generation, mail identity configuration for data exfiltration, and network traffic management.
Features
- Credential Harvesting Simulations - Mimics login portals to test organizational susceptibility to credential theft and phishing.
- Data Exfiltration - Employs techniques to move captured sensitive credentials out of the network via email.
- Event Capture - Intercepts form submission events to extract user-inputted data for credential harvesting.
- Phishing Campaign Orchestrators - Coordinates the deployment of deceptive pages and the routing of captured data in security simulations.
- Data Exfiltration Tools - Provides an integrated SMTP mechanism to exfiltrate captured credentials to a remote recipient.
- Web Form Credential Captures - Captures login details directly from deceptive web pages for transmission to an email address.
- Social Engineering Simulations - Creates deceptive login and landing sites to simulate and test human vulnerabilities in security.
- Phishing Page Generators - Creates realistic, deceptive login interfaces used to simulate credential harvesting attacks.
- Deceptive Pages - Generates deceptive web interfaces using pre-defined layouts to trick users into revealing data.
- Local Server Tunnels - Exposes a local development server to the public internet via a secure tunnel.
- Automatic Traffic Redirection Handlers - Implements application-layer redirection to forward users to a legitimate site after a phishing request.
- Phishing Templates - Provides pre-made HTML and CSS layouts that mimic popular social media and payment platforms.
- Service Provider Clones - Generates cloned login pages for various service providers to deceive users into submitting credentials.
- URL Redirections - Redirects users to legitimate third-party URLs after data capture to mask deceptive activity.
