FiercePhish

Phishing simulator

A tool for managing phishing campaigns and simulating email attacks.

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

GitHub

1k stars
79 watching
254 forks
Language: PHP
last commit: about 1 year ago
Linked from 1 awesome list

emailhackingnetsecphishingsecurity

Backlinks from these awesome lists:

Related projects:

Repository Description Stars
gemgeorge/sniperphish A web-based phishing toolkit designed to simulate real-world attacks for security testing and awareness training. 561
pentestgeek/phishing-frenzy A Ruby on Rails tool used to simulate phishing attacks and test email security vulnerabilities 804
mandiant/reelphish A tool designed to test the effectiveness of phishing defenses by simulating real-time two-factor phishing attacks. 509
sebastian-mora/awsssome_phish A tool for simulating phishing attacks on AWS SSO using a serverless architecture and automated deployment. 31
zerofox-oss/phishpond A tool for analyzing phishing kits in a contained environment 44
xiecat/goblin A tool for simulating phishing attacks in red teaming exercises. 1,451
curtbraz/phishapi A tool for creating and deploying fake web pages to steal credentials 372
yaxser/sharpphish This tool creates convincing phishing emails using Outlook COM objects to test an O365 module 152
muraenateam/muraena Automates interactions with targeted websites to mimic user behavior and gather data 939
emalderson/thephish An automated email analysis tool that uses machine learning and API integrations to identify phishing emails 1,165
optiv/microsoft365_devicephish A tool designed to demonstrate a vulnerability in Microsoft's OAuth Authorization Flow for phishing attacks 94
societe-generale/swordphish-awareness An application designed to raise awareness of phishing among users by providing a simple way to report suspicious emails. 220
viralmaniar/murmurhash Tools for detecting phishing websites by analyzing favicon hashes and searching on Shodan 115
alteredsecurity/365-stealer A phishing simulation tool that automates illicit consent grant attacks on Azure AD using Python3 and PHP. 458
octoberfest7/teamsphisher A tool designed to send phishing messages and attachments to Microsoft Teams users 1,039