Zphisher - Phishing Website Tool: Difference between revisions
LTrifunovic (talk | contribs) No edit summary |
LTrifunovic (talk | contribs) No edit summary |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 6: | Line 6: | ||
* Operating system: Ubuntu 22.04 LTS (Jammy Jellyfish) 64-bit - (it does work on other versions too, this was the used one) | * Operating system: Ubuntu 22.04 LTS (Jammy Jellyfish) 64-bit - (it does work on other versions too, this was the used one) | ||
* Git dependecies: sudo apt-get install git | |||
== Description == | == Description == | ||
| Line 15: | Line 15: | ||
*git clone https://github.com/htr-tech/zphisher.git | *git clone https://github.com/htr-tech/zphisher.git | ||
[[File:Zphisher_2.PNG]] | |||
=== Step 2 === | === Step 2 === | ||
| Line 21: | Line 23: | ||
*zphisher.sh | *zphisher.sh | ||
[[File:Zphisher_3.PNG]] | |||
=== Step 3 === | === Step 3 === | ||
| Line 29: | Line 33: | ||
the tool can be started. Following page will appear, where we can select a website to clone: | the tool can be started. Following page will appear, where we can select a website to clone: | ||
[[File:Zphisher_4.PNG]] | |||
=== Step 4 === | === Step 4 === | ||
| Line 37: | Line 43: | ||
The setup is now finished and we get a page with the link, with which we can access the fake website on any machine. | The setup is now finished and we get a page with the link, with which we can access the fake website on any machine. | ||
[[File:Zphisher_5.PNG]] | |||
The fake Twitter website looks like following: | The fake Twitter website looks like following: | ||
[[File:Zphisher_6.PNG]] | |||
=== Step 6 === | |||
When entering credentials and pressing "Log in", the tool will detect these and print them out. They are saved in a file "auth/usernames.dat". Besides the credentials, the IP-address of the victim is printed out too and saved in "auth/ip-txt". | When entering credentials and pressing "Log in", the tool will detect these and print them out. They are saved in a file "auth/usernames.dat". Besides the credentials, the IP-address of the victim is printed out too and saved in "auth/ip-txt". | ||
[[File:Zphisher_7.PNG]] | |||
[[File:Zphisher_8.PNG]] | |||
[[ | [[Category:Documentation]] | ||
== References == | == References == | ||
*https://github.com/htr-tech/zphisher | |||
* https:// | |||
Latest revision as of 20:51, 19 December 2024
Summary
Zphisher is a Software-Tool that allows users to create and host fake website like Netflix.com, Linkedin.com and many more. Once created, a phishing can be shared with others. If victims put in their credentials in the fake website, the tool will capture and save them.
Requirements
- Operating system: Ubuntu 22.04 LTS (Jammy Jellyfish) 64-bit - (it does work on other versions too, this was the used one)
- Git dependecies: sudo apt-get install git
Description
Step 1
The tool is available on GitHub. Thus, we have to clone it on our machine with following command:
- git clone https://github.com/htr-tech/zphisher.git
Step 2
A "Zphisher" directory will appear. If we navigate two times into this directory (with cd command), we will see following bash file:
- zphisher.sh
Step 3
With this command:
- bash zphisher.sh
the tool can be started. Following page will appear, where we can select a website to clone:
Step 4
For this example, we will input the number 8 in order to clone Twitter. The next question is the port forwarding service, for which we will use Cloudflared, thus number 2. We will be asked whether we want a custom port. This is not neccessary, so input "N". The same applies for the question if we want to mask the URL or not -> "N"
Step 5
The setup is now finished and we get a page with the link, with which we can access the fake website on any machine.
The fake Twitter website looks like following:
Step 6
When entering credentials and pressing "Log in", the tool will detect these and print them out. They are saved in a file "auth/usernames.dat". Besides the credentials, the IP-address of the victim is printed out too and saved in "auth/ip-txt".
