Open In App

PyPhisher – Simple Python Tool for Phishing

Improve
Improve
Like Article
Like
Save
Share
Report

Phishing is a social-engineering attack in which the attacker targets the victim’s brain for getting critical details like usernames, passwords, etc. In Phishing the clone of the genuine page is been created to bluff the victim and capture the credentials. For example, we can create a phishing page like http://geeksforgeekss.org which is completely identical to http://geeksforgeeks.org. Only the difference between both URLs is the extra ‘s’ which is added in the first URL. The victim will not be aware that the credentials which he/she will be entering will go into the malicious person’s hand instead of on GeeksforGeeks genuine server. So to perform the Phishing Ethically, we have the PyPhisher tool, which is developed in the Python language and has support to various genuine social platforms like Facebook, Snapchat, etc. In this article, we will install the PyPhisher tool and go through the usage of the tool in the Linux operating system.

PyPhisher Banner

 

Installation

Step 1: Here, firstly we will navigate to the Desktop directory and then clone the PyPhisher tool from the GitHub platform.

cd Desktop

git clone https://github.com/KasRoudra/pyphisher

Cloning PyPhisher tool

 

Step 2: Use the below cd command to navigate to the pyphisher directory which is been created after the cloning of the PyPhisher tool in the Desktop directory.

cd pyphisher
Changing directory

 

Step 3: Execute the pyphisher.py file to verify the installation.

python3 pyphisher.py
Executing tool file

 

The tool has been installed and running successfully. Now we will go through the usage of the PyPhisher tool in the form of an example.

Usage of PyPhisher tool

Example 1: Use the PyPhisher tool to find the Gmail credentials of a user.

Select Option 9
Selecting Gmail Option

 

Copy the URL on web browser

Copy the malicious phishing URL and paste it into a web browser.

Copying malicious URL

 

Enter Gmail ID and Password

Enter credentials on the phishing 

Entering credentials on phishing page

 

Entered credential details are been captured by the PyPhisher tool.

Capturing credentials

 


Last Updated : 21 Apr, 2022
Like Article
Save Article
Previous
Next
Share your thoughts in the comments
Similar Reads