htr-tech/zphisher

Zphisher is an automated phishing toolkit, a tool that creates fake login pages designed to look like real websites in order to capture someone's credentials when they try to log in. It comes with more than 30 ready-made templates imitating login pages for popular services. The tool is described as intended for educational purposes, specifically to demonstrate how phishing attacks work, and the author states they are not responsible for misuse. Phishing is a type of cyber attack where someone is tricked into entering their username and password on a fake version of a website they trust. Tools like this are sometimes used in security training and penetration testing, authorized testing of a system's defenses, but carry significant legal risk if used without permission. Zphisher is written in Bash (a scripting language for command-line use) and runs on various Linux environments. It supports several methods for making the fake page accessible from outside a local network, including tunneling services (Cloudflared and LocalXpose), and includes URL masking to make the malicious link look more legitimate. It also supports Docker for easier deployment. Dependencies are installed automatically on first run.