Zphisher - Phishing Website Tool

Summary

Zphisher is a Software-Tool that allows users to create and host fake website like Netflix.com, Linkedin.com and many more. Once created, a phishing can be shared with others. If victims put in their credentials in the fake website, the tool will capture and save them.

Requirements

• Operating system: Ubuntu 22.04 LTS (Jammy Jellyfish) 64-bit - (it does work on other versions too, this was the used one)

Description

Step 1

The tool is available on GitHub. Thus, we have to clone it on our machine with following command:

• git clone https://github.com/htr-tech/zphisher.git

Step 2

A "Zphisher" directory will appear. If we navigate two times into this directory (with cd command), we will see following bash file:

• zphisher.sh

Step 3

With this command:

• bash zphisher.sh

the tool can be started. Following page will appear, where we can select a website to clone:

Step 4

For this example, we will input the number 8 in order to clone Twitter. The next question is the port forwarding service, for which we will use Cloudflared, thus number 2. We will be asked whether we want a custom port. This is not neccessary, so input "N". The same applies for the question if we want to mask the URL or not -> "N"

Step 5

The setup is now finished and we get a page with the link, with which we can access the fake website on any machine.

The fake Twitter website looks like following:

Step 6

When entering credentials and pressing "Log in", the tool will detect these and print them out. They are saved in a file "auth/usernames.dat". Besides the credentials, the IP-address of the victim is printed out too and saved in "auth/ip-txt".

Used Hardware

Device to be used with this documentation Maybe another device to be used with this documentation

Courses

• A course where this documentation was used (2017, 2018)
• Another one (2018)

References

• https://wikipedia.org
• https://google.com