GitHub Projects/Tools

Old Tools That's no longer functional

Black eye

Overview

BlackEye is a phishing tool that is used for educational and testing purposes. It allows security professionals, researchers, and ethical hackers to simulate phishing attacks and assess the security awareness of individuals and organizations. BlackEye provides a variety of pre-designed phishing pages and methods to trick users into revealing sensitive information, such as usernames, passwords, or other credentials.

BlackEye features

  • Wide range of templates: BlackEye offers a collection of phishing templates for popular websites like Facebook, Instagram, Google, Microsoft, and many more. These templates mimic the original login pages, increasing the chances of successful phishing attacks.

  • Customization options: Users can customize the phishing templates according to their needs. They can modify the appearance, content, and fields to make the phishing pages look authentic and enticing to victims.

  • Credential capture: BlackEye captures the submitted credentials entered by the victims on the phishing pages. It stores the captured data, allowing the attacker to access and use it later for unauthorized activities.

  • Phishing URL generation: BlackEye generates unique phishing URLs that can be shared with the target victims through various channels like email, social media, or instant messaging. These URLs redirect users to the phishing pages, increasing the likelihood of successful phishing attacks.

GitHub Projects

There are several versions of this project available, but none of them are currently working .

even if there are several versions, none of them function.

Hidden Eye

Overview

HiddenEye is an open-source phishing tool available on GitHub. It is designed for educational and ethical use to demonstrate the techniques and methods employed by attackers in phishing attacks. The tool provides a framework for creating and deploying various phishing campaigns, allowing users to simulate real-world scenarios and understand the risks associated with phishing.

With HiddenEye, users can generate phishing pages for popular websites and services, such as social media platforms, email providers, banking websites, and more. The tool offers different phishing methods, including credential harvesting, keylogging, and two-factor authentication (2FA) bypass techniques.

Hidden Eye features

  • Wide range of templates: Hidden Eye offers a diverse set of phishing templates for platforms like Facebook, Instagram, Google, LinkedIn, and more. These templates closely resemble the original login pages, increasing the effectiveness of phishing attacks.

  • Customization options: Users can customize the phishing templates to make them more convincing and tailored to their targets. They can modify the appearance, content, and fields of the phishing pages to appear legitimate and attract unsuspecting victims.

  • Credential capture: Hidden Eye captures the credentials entered by victims on the phishing pages. It stores the collected data, allowing the attacker to access and misuse it for unauthorized activities.

  • Phishing URL generation: Hidden Eye generates unique phishing URLs that can be shared with the target victims through various communication channels. These URLs redirect users to phishing pages, enhancing the chances of successful phishing attacks.

GitHub Projects

There are several versions of this project available, but none of them are currently working.

even if there are several versions, none of them function.

New Tools that function currently

Zphisher

Overview

Zphisher is an open-source phishing tool designed for educational and research purposes. It allows users to create and deploy phishing pages to perform simulated phishing attacks. Phishing is a social engineering technique used to deceive individuals into revealing sensitive information such as usernames, passwords, or credit card details by posing as a legitimate entity.

It is important to note that phishing is an illegal activity when used without the explicit consent of the targeted individuals or organizations. Zphisher should only be used in controlled environments for educational purposes, such as raising awareness about phishing techniques and training individuals to recognize and avoid such attacks.

Using Zphisher or any other phishing tool for malicious purposes is illegal and unethical. It is essential to always respect the privacy and security of others and comply with applicable laws and regulations when conducting any security-related activities.

Features of Zphisher

  1. Multiple Phishing Page Templates: Zphisher provides a variety of pre-designed phishing page templates mimicking popular websites and services. These templates can be customized to create convincing phishing pages tailored to the target audience.

  2. Automated Phishing Campaigns: With Zphisher, users can automate phishing campaigns by generating a phishing link and sending it to their targets. The tool tracks and records the entered credentials, providing the user with the harvested information.

  3. Credential Logging: Zphisher includes a credential logging feature that captures and logs the entered credentials on the phishing page. This allows users to analyze and retrieve the harvested data for educational or research purposes.

  4. Customization Options: Users can customize various aspects of the phishing pages, such as the appearance, content, and behavior, to make them appear more legitimate and increase the chances of successful phishing attacks.

  5. Reporting and Analytics: Zphisher provides basic reporting and analytics features, allowing users to view statistics on the success of their phishing campaigns, including the number of visits, submitted credentials, and more.

Download From GitHub

PyPhisher

The ultimate phishing tool in Python Includes popular websites like facebook, twitter, instagram, github, reddit, gmail and many others.

This project is now a part of MaxPhisher.

You can learn more about this Tool on This YouTube Video/Tutorial created by InfoSec Pat .

SocialFish

SocialFish is an open-source tool available on GitHub that can be used for advanced phishing attacks and social engineering campaigns. It is important to note that using such tools for malicious or unethical purposes is strictly prohibited.

SocialFish allows users to create convincing phishing pages of popular social media platforms, email services, and other online platforms. These phishing pages can be used to trick unsuspecting users into providing their login credentials or sensitive information.

However, it is crucial to understand that engaging in any form of unauthorized access or phishing is illegal and unethical. The use of SocialFish or similar tools should only be for educational purposes, such as raising awareness about phishing attacks and demonstrating the potential risks to individuals and organizations.

This Tools has 2 Versions : SF's mobile controller , SF's old version(Ngrok integrated)

Last updated