Zphisher - Phishing Website Tool
Summary
Zphisher is a Software-Tool that allows users to create and host fake website like Netflix.com, Linkedin.com and many more. Once created, a phishing can be shared with others. If victims put in their credentials in the fake website, the tool will capture and save them.
Requirements
- Operating system: Ubuntu 22.04 LTS (Jammy Jellyfish) 64-bit - (it does work on other versions too, this was the used one)
- Git dependecies: sudo apt-get install git
Description
Step 1
The tool is available on GitHub. Thus, we have to clone it on our machine with following command:
- git clone https://github.com/htr-tech/zphisher.git
Step 2
A "Zphisher" directory will appear. If we navigate two times into this directory (with cd command), we will see following bash file:
- zphisher.sh
Step 3
With this command:
- bash zphisher.sh
the tool can be started. Following page will appear, where we can select a website to clone:
Step 4
For this example, we will input the number 8 in order to clone Twitter. The next question is the port forwarding service, for which we will use Cloudflared, thus number 2. We will be asked whether we want a custom port. This is not neccessary, so input "N". The same applies for the question if we want to mask the URL or not -> "N"
Step 5
The setup is now finished and we get a page with the link, with which we can access the fake website on any machine.
The fake Twitter website looks like following:
Step 6
When entering credentials and pressing "Log in", the tool will detect these and print them out. They are saved in a file "auth/usernames.dat". Besides the credentials, the IP-address of the victim is printed out too and saved in "auth/ip-txt".
