Zphisher - Phishing Website Tool - Revision history

LTrifunovic at 20:51, 19 December 2024

2024-12-19T20:51:07Z

← Older revision		Revision as of 20:51, 19 December 2024
Line 59:		Line 59:

	[[Category:Documentation]]		[[Category:Documentation]]

			== References ==
			*https://github.com/htr-tech/zphisher

LTrifunovic at 14:19, 18 December 2024

2024-12-18T14:19:47Z

← Older revision		Revision as of 14:19, 18 December 2024
Line 57:		Line 57:

	[[File:Zphisher_8.PNG]]		[[File:Zphisher_8.PNG]]

			[[Category:Documentation]]

LTrifunovic at 13:45, 18 December 2024

2024-12-18T13:45:39Z

@@ Line 6: / Line 6: @@
 * Operating system: Ubuntu 22.04 LTS (Jammy Jellyfish) 64-bit  -  (it does work on other versions too, this was the used one)
+* Git dependecies: sudo apt-get install git
 == Description ==
@@ Line 56: / Line 56: @@
 [[File:Zphisher_7.PNG]]
+[[File:Zphisher_8.PNG]]

LTrifunovic at 13:40, 18 December 2024

2024-12-18T13:40:11Z

← Older revision		Revision as of 13:40, 18 December 2024
Line 15:		Line 15:

	*git clone https://github.com/htr-tech/zphisher.git		*git clone https://github.com/htr-tech/zphisher.git

			[[File:Zphisher_2.PNG]]

	=== Step 2 ===		=== Step 2 ===
Line 21:		Line 23:

	*zphisher.sh		*zphisher.sh

			[[File:Zphisher_3.PNG]]

	=== Step 3 ===		=== Step 3 ===
Line 29:		Line 33:

	the tool can be started. Following page will appear, where we can select a website to clone:		the tool can be started. Following page will appear, where we can select a website to clone:

			[[File:Zphisher_4.PNG]]

	=== Step 4 ===		=== Step 4 ===
Line 37:		Line 43:

	The setup is now finished and we get a page with the link, with which we can access the fake website on any machine.		The setup is now finished and we get a page with the link, with which we can access the fake website on any machine.

			[[File:Zphisher_5.PNG]]

	The fake Twitter website looks like following:		The fake Twitter website looks like following:

			[[File:Zphisher_6.PNG]]

			=== Step 6 ===

	When entering credentials and pressing "Log in", the tool will detect these and print them out. They are saved in a file "auth/usernames.dat". Besides the credentials, the IP-address of the victim is printed out too and saved in "auth/ip-txt".		When entering credentials and pressing "Log in", the tool will detect these and print them out. They are saved in a file "auth/usernames.dat". Besides the credentials, the IP-address of the victim is printed out too and saved in "auth/ip-txt".

			[[File:Zphisher_7.PNG]]

LTrifunovic at 15:10, 16 December 2024

2024-12-16T15:10:27Z

← Older revision		Revision as of 15:10, 16 December 2024
Line 40:		Line 40:


	When entering credentials and pressing "Log in", the tool will detect these and print them out. They are saved in a file ~~named~~ ""		When entering credentials and pressing "Log in", the tool will detect these and print them out. They are saved in a file "auth/usernames.dat". Besides the credentials, the IP-address of the victim is printed out too and saved in "auth/ip-txt".

LTrifunovic at 15:08, 16 December 2024

2024-12-16T15:08:20Z

← Older revision		Revision as of 15:08, 16 December 2024
Line 23:		Line 23:

	=== Step 3 ===		=== Step 3 ===

			With this command:

			*bash zphisher.sh

			the tool can be started. Following page will appear, where we can select a website to clone:

			=== Step 4 ===

			For this example, we will input the number 8 in order to clone Twitter. The next question is the port forwarding service, for which we will use Cloudflared, thus number 2. We will be asked whether we want a custom port. This is not neccessary, so input "N". The same applies for the question if we want to mask the URL or not -> "N"

			=== Step 5 ===

			The setup is now finished and we get a page with the link, with which we can access the fake website on any machine.
			The fake Twitter website looks like following:


			When entering credentials and pressing "Log in", the tool will detect these and print them out. They are saved in a file named ""


	== Used Hardware ==		== Used Hardware ==

LTrifunovic at 14:49, 16 December 2024

2024-12-16T14:49:44Z

← Older revision		Revision as of 14:49, 16 December 2024
Line 5:		Line 5:
	== Requirements ==		== Requirements ==

	* Operating system: Ubuntu 22.04 LTS (Jammy Jellyfish) 64-bit - (it does work on other versions too, this was the used ~~version~~)		* Operating system: Ubuntu 22.04 LTS (Jammy Jellyfish) 64-bit - (it does work on other versions too, this was the used one)


	~~In order to complete these steps, you must have followed [[Some Other Documentation]] before.~~

	== Description ==		== Description ==
Line 14:		Line 12:
	=== Step 1 ===		=== Step 1 ===

	~~Enter these commands in the shell~~		The tool is available on GitHub. Thus, we have to clone it on our machine with following command:

	~~echo foo~~		*git clone https://github.com/htr-tech/zphisher.git
	~~echo bar~~

	=== Step 2 ===		=== Step 2 ===

	~~Make sure to read~~		A "Zphisher" directory will appear. If we navigate two times into this directory (with cd command), we will see following bash file:

			*zphisher.sh

	* War and Peace		=== Step 3 ===
	* Lord of the Rings
	* The Baroque Cycle

	== Used Hardware ==		== Used Hardware ==

LTrifunovic at 14:30, 16 December 2024

2024-12-16T14:30:46Z

← Older revision		Revision as of 14:30, 16 December 2024
Line 1:		Line 1:
	== Summary ==		== Summary ==

	~~This~~ Tool allows users to create phishing ~~Websites~~ and ~~steal the inputted credentials~~.		Zphisher is a Software-Tool that allows users to create and host fake website like Netflix.com, Linkedin.com and many more. Once created, a phishing can be shared with others. If victims put in their credentials in the fake website, the tool will capture and save them.

	== Requirements ==		== Requirements ==

	* Operating system: Ubuntu 18.04 ~~bionic amd64~~		* Operating system: Ubuntu 22.04 LTS (Jammy Jellyfish) 64-bit - (it does work on other versions too, this was the used version)
	* Packages: git emacs

	In order to complete these steps, you must have followed [[Some Other Documentation]] before.		In order to complete these steps, you must have followed [[Some Other Documentation]] before.

LTrifunovic: Created page with "== Summary == This Tool allows users to create phishing Websites and steal the inputted credentials. == Requirements == * Operating system: Ubuntu 18.04 bionic amd64 * Packages: git emacs In order to complete these steps, you must have followed Some Other Documentation before. == Description == === Step 1 === Enter these commands in the shell echo foo echo bar === Step 2 === Make sure to read * War and Peace * Lord of the Rings * The Baroque Cycle == U..."

2024-12-16T14:08:35Z

Created page with "== Summary == This Tool allows users to create phishing Websites and steal the inputted credentials. == Requirements == * Operating system: Ubuntu 18.04 bionic amd64 * Packages: git emacs In order to complete these steps, you must have followed Some Other Documentation before. == Description == === Step 1 === Enter these commands in the shell echo foo echo bar === Step 2 === Make sure to read * War and Peace * Lord of the Rings * The Baroque Cycle == U..."

New page

== Summary ==

This Tool allows users to create phishing Websites and steal the inputted credentials.

== Requirements ==

* Operating system: Ubuntu 18.04 bionic amd64
* Packages: git emacs

In order to complete these steps, you must have followed [[Some Other Documentation]] before.

== Description ==

=== Step 1 ===

Enter these commands in the shell

echo foo
echo bar

=== Step 2 ===

Make sure to read

* War and Peace
* Lord of the Rings
* The Baroque Cycle

== Used Hardware ==

[[Device to be used with this documentation]]
[[Maybe another device to be used with this documentation]]

== Courses ==

* [[A course where this documentation was used]] (2017, 2018)
* [[Another one]] (2018)

== References ==

* https://wikipedia.org
* https://google.com

[[Category:Documentation]]