How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM.
The main features of ring0lab/catphish are: Social Engineering, Social Engineering Tools.
Open-source alternatives to ring0lab/catphish include: kgretzky/evilginx2 — Evilginx2 is a man-in-the-middle phishing framework designed to proxy authentication traffic between a user and a… securestate/king-phisher — Phishing Campaign Toolkit. drk1wi/modlishka — Modlishka is a man-in-the-middle reverse proxy framework designed for automated phishing campaigns. It dynamically… fireeye/reelphish — This tool has been released along with a FireEye blog post. The blog post can be found at the following link:… ryhanson/phishery — An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector. undeadsec/socialfish — SocialFish is a credential harvesting tool and phishing framework designed to intercept usernames, passwords, and…
This tool has been released along with a FireEye blog post. The blog post can be found at the following link: https://www.fireeye.com/blog/threat-research/2018/02/reelphish-real-time-two-factor-phishing-tool.html
Evilginx2 is a man-in-the-middle phishing framework designed to proxy authentication traffic between a user and a target web service. By acting as a reverse proxy, the tool intercepts and relays web requests to capture credentials and session tokens in real time, enabling the bypass of multi-factor authentication mechanisms through session cookie hijacking. The platform distinguishes itself by integrating infrastructure orchestration with modular template-driven content injection. It automates the deployment of proxy servers, manages the lifecycle of encryption certificates, and applies conte
Modlishka is a man-in-the-middle reverse proxy framework designed for automated phishing campaigns. It dynamically generates valid TLS certificates for target domains, aggregates traffic from multiple domains through a single proxy, and injects custom scripts into proxied responses. The framework operates transparently without requiring client-side certificate installation and relays two-factor authentication steps to capture secondary verification tokens. What sets Modlishka apart is its ability to automate the entire credential theft process. It logs all form submissions, headers, and cooki
An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector