For o platformă pentru simularea atacurilor de phishing, the strongest matches are gophish/gophish (Gophish is a self-hostable phishing simulation framework that lets), ignitetch/advphishing (AdvPhishing is a self-hostable phishing simulation tool that lets) and trustedsec/social-engineer-toolkit (The Social-Engineer Toolkit is a well-known penetration testing suite). securestate/king-phisher is also worth a look. Each is ranked by relevance to your query, popularity and recent activity.
Instrumente open-source pentru efectuarea de atacuri de tip phishing simulate, menite să îmbunătățească conștientizarea securității organizaționale și instruirea angajaților.
Gophish is an open-source phishing toolkit and simulation framework designed to test organizational security awareness and evaluate vulnerability to social engineering attacks. It provides a core engine for sending deceptive emails to targets and tracking their interactions to identify gaps in security training. The platform functions as a comprehensive campaign manager for deploying lures and monitoring email delivery and click-through rates. It allows for the design and execution of simulated email threats to track how targets interact with malicious-looking content or provide credentials i
Gophish is a self-hostable phishing simulation framework that lets you create, run, and manage email‑based campaigns with tracking and reporting—exactly the kind of tool needed for security awareness training, though it lacks SMS and integrated training content.
AdvPhishing is a tool for social engineering simulations and credential harvesting testing. It generates deceptive web interfaces, including cloned service provider pages and pre-made layouts that mimic payment and social media platforms, to capture user login details. The tool manages the end-to-end deployment of phishing campaigns by routing captured credentials to a specified email address via an integrated SMTP mail delivery mechanism. It includes utilities for exposing a local development server to the public internet through secure tunneling and redirects users to legitimate third-party
AdvPhishing is a self-hostable phishing simulation tool that lets you deploy credential-harvesting campaigns with pre-built cloned pages and automatic data exfiltration, fitting the core purpose—though it lacks integrated training content and multi-channel support.
The Social-Engineer Toolkit is a social engineering framework and penetration testing suite designed to simulate human-centric security attacks. It serves as a phishing simulation tool and credential harvesting utility to evaluate personnel awareness and organizational resilience. The toolkit provides specialized tooling for phishing campaign testing and credential theft simulation. It enables the creation of deceptive emails and landing pages to identify vulnerabilities in how users handle sensitive account information. The system includes capabilities for security awareness training and br
The Social-Engineer Toolkit is a well-known penetration testing suite that includes phishing simulation, campaign management, and customizable templates, making it a solid fit for running security awareness phishing tests, though it may not offer the full reporting and LDAP sync features of a dedicated platform.
Phishing Campaign Toolkit
King-Phisher is a dedicated phishing campaign toolkit built for simulating attacks and security awareness training, directly matching the core purpose of creating and managing phishing simulations even if its full feature set isn’t detailed.