AdvPhishing | Awesome Repository

Features

Credential Harvesting Simulations - Mimics login portals to test organizational susceptibility to credential theft and phishing.
Data Exfiltration - Employs techniques to move captured sensitive credentials out of the network via email.
Event Capture - Intercepts form submission events to extract user-inputted data for credential harvesting.
Phishing Campaign Orchestrators - Coordinates the deployment of deceptive pages and the routing of captured data in security simulations.
Data Exfiltration Tools - Provides an integrated SMTP mechanism to exfiltrate captured credentials to a remote recipient.
Web Form Credential Captures - Captures login details directly from deceptive web pages for transmission to an email address.
Social Engineering Simulations - Creates deceptive login and landing sites to simulate and test human vulnerabilities in security.
Phishing Page Generators - Creates realistic, deceptive login interfaces used to simulate credential harvesting attacks.
Deceptive Pages - Generates deceptive web interfaces using pre-defined layouts to trick users into revealing data.
Local Server Tunnels - Exposes a local development server to the public internet via a secure tunnel.
Automatic Traffic Redirection Handlers - Implements application-layer redirection to forward users to a legitimate site after a phishing request.
Phishing Templates - Provides pre-made HTML and CSS layouts that mimic popular social media and payment platforms.
Service Provider Clones - Generates cloned login pages for various service providers to deceive users into submitting credentials.
URL Redirections - Redirects users to legitimate third-party URLs after data capture to mask deceptive activity.

AdvPhishing is a tool for social engineering simulations and credential harvesting testing. It generates deceptive web interfaces, including cloned service provider pages and pre-made layouts that mimic payment and social media platforms, to capture user login details.

The tool manages the end-to-end deployment of phishing campaigns by routing captured credentials to a specified email address via an integrated SMTP mail delivery mechanism. It includes utilities for exposing a local development server to the public internet through secure tunneling and redirects users to legitimate third-party destinations after data capture to hide deceptive activity.

Broad capabilities cover deceptive page generation, mail identity configuration for data exfiltration, and network traffic management.

Features

Credential Harvesting Simulations - Mimics login portals to test organizational susceptibility to credential theft and phishing.
Data Exfiltration - Employs techniques to move captured sensitive credentials out of the network via email.
Event Capture - Intercepts form submission events to extract user-inputted data for credential harvesting.
Phishing Campaign Orchestrators - Coordinates the deployment of deceptive pages and the routing of captured data in security simulations.
Data Exfiltration Tools - Provides an integrated SMTP mechanism to exfiltrate captured credentials to a remote recipient.
Web Form Credential Captures - Captures login details directly from deceptive web pages for transmission to an email address.
Social Engineering Simulations - Creates deceptive login and landing sites to simulate and test human vulnerabilities in security.
Phishing Page Generators - Creates realistic, deceptive login interfaces used to simulate credential harvesting attacks.
Deceptive Pages - Generates deceptive web interfaces using pre-defined layouts to trick users into revealing data.
Local Server Tunnels - Exposes a local development server to the public internet via a secure tunnel.
Automatic Traffic Redirection Handlers - Implements application-layer redirection to forward users to a legitimate site after a phishing request.
Phishing Templates - Provides pre-made HTML and CSS layouts that mimic popular social media and payment platforms.
Service Provider Clones - Generates cloned login pages for various service providers to deceive users into submitting credentials.
URL Redirections - Redirects users to legitimate third-party URLs after data capture to mask deceptive activity.