Phishing is a social-engineering attack in which the attacker targets the victim’s brain for getting critical details like usernames, passwords, etc. In Phishing the clone of the genuine page is been created to bluff the victim and capture the credentials. For example, we can create a phishing page like http://geeksforgeekss.org which is completely identical to http://geeksforgeeks.org. Only the difference between both URLs is the extra ‘s’ which is added in the first URL. The victim will not be aware that the credentials which he/she will be entering will go into the malicious person’s hand instead of on GeeksforGeeks genuine server. So to perform the Phishing Ethically, we have the PyPhisher tool, which is developed in the Python language and has support to various genuine social platforms like Facebook, Snapchat, etc. In this article, we will install the PyPhisher tool and go through the usage of the tool in the Linux operating system.
Installation
Step 1: Here, firstly we will navigate to the Desktop directory and then clone the PyPhisher tool from the GitHub platform.
cd Desktop
git clone https://github.com/KasRoudra/pyphisher
Step 2: Use the below cd command to navigate to the pyphisher directory which is been created after the cloning of the PyPhisher tool in the Desktop directory.
cd pyphisher
Step 3: Execute the pyphisher.py file to verify the installation.
python3 pyphisher.py
The tool has been installed and running successfully. Now we will go through the usage of the PyPhisher tool in the form of an example.
Usage of PyPhisher tool
Example 1: Use the PyPhisher tool to find the Gmail credentials of a user.
Select Option 9
Copy the URL on web browser
Copy the malicious phishing URL and paste it into a web browser.
Enter Gmail ID and Password
Enter credentials on the phishing
Entered credential details are been captured by the PyPhisher tool.