awesome-phishing
Collection of resources related to phishing
https://github.com/PhishyAlice/awesome-phishing
Last synced: 16 days ago
JSON representation
[↑](#table-of-contents) Books and ebooks
Payload tools
- Phishing Dark Waters: The Offensive and Defensive Sides of Malicious Emails
- Phishing for Phools: The Economics of Manipulation and Deception
- Scam Me If You Can: Simple Strategies to Outsmart Today's Rip-off Artists
- Phishing: Detection, Analysis And Prevention
- Social Engineering: The Science of Human Hacking
- Don't Step in the Trap: How to Recognize and Avoid Email Phishing Scams
- Asset Attack Vectors: Building Effective Vulnerability Management Strategies to Protect Organizations
- Cyberpsychology: The Study of Individuals, Society and Digital Technologies
- Stealing Your Life: The Ultimate Identity Theft Prevention Plan
- Open Source Intelligence Techniques: Resources for Searching and Analyzing Online Information
- Swiped: How to Protect Yourself in a World Full of Scammers, Phishers, and Identity Thieves
- Spam Nation: The Inside Story of Organized Cybercrime - from Global Epidemic to Your Front Door
- Phishing: Detection, Analysis And Prevention
[↑](#table-of-contents) Campaign write-ups
Payload tools
- Darknet diaries: The hack
- Tainted Leaks: Disinformation and Phishing With a Russian Nexus
- Nile Phish: Large-Scale Phishing Campaign Targeting Egyptian Civil Society
- Exposing One of China’s Cyber Espionage Units
- Analysing a massive Office 365 phishing campaign
- Gmail Phishing Campaign Racking Up Victims
- Spying on a Budget: Inside a Phishing Operation with Targets in the Tibetan Community
- An OSINT Analysis of the Elon Musk Bitcoin Scam
- Reckless Redux: Senior Mexican Legislators and Politicians Targeted with NSO Spyware
- Reckless Exploit: Mexican Journalists, Lawyers, and a Child Targeted with NSO Spyware
- Shifting Tactics: Tracking changes in years-long espionage campaign against Tibetans
- Packrat: Seven Years of a South American Threat Actor
- Chinese hackers steal Gmail passwords: Google
- The RSA Hack: How They Did It
- Exposing One of China’s Cyber Espionage Units
- The RSA Hack: How They Did It
- Grizzly Steppe - Russian Malicious Cyber Activity
- Gmail Phishing Campaign Racking Up Victims
[↑](#table-of-contents) Email security
Email authentication
- Part 3: How to Set up SPF and DKIM with Postfix on Ubuntu Server
- How to Set Up DKIM in 3 Simple Steps
- Authenticated Received Chain Overview
- The "iprev" Authentication Method
- How to Set Up DKIM in 3 Simple Steps
- How To Set Up Your Author Domain Signing Practices (HISTORIC)
- The "iprev" Authentication Method
Encryption standards
- SSL vs TLS vs STARTTLS
- Two-Factor Authentication for Beginners
- How to encrypt email (Gmail, Outlook iOS, OSX, Android, Webmail)
- How to encrypt email (Gmail, Outlook iOS, OSX, Android, Webmail)
- Two-Factor Authentication for Beginners
Filtering techniques
- Classify emails into ham and spam using Naive Bayes Classifier
- Filtering Spam Using Naive Bayes
- Using SpamAssassin
- Sieve Tutorial
- fdm/MANUAL
- Nolisting: Poor Man's Greylisting
- How to Add Antivirus and Spam Protection to Postfix Mail Server with ClamAV and SpamAssassin – Part 3
- Email Greylisting. How does greylisting work?
- DNSBL (DNS Black List)
- Spamtrap 101: What they Are, Why You Hit Them, & What to Do About It
- Setting up an email honeypot spamtrap, malware, malspam trap.
- Nolisting: Poor Man's Greylisting
- The CRM114 & Mailfilter HOWTO
[↑](#table-of-contents) Miscellaneous
Definitions
- Mitre ATT&CK: Spearphishing attachment
- Mitre ATT&CK: Spearphishing via service
- KnowBe4 info site
- Anti-Pharming 101: What are pharming attacks?
- Mitre ATT&CK: Spearphishing link
- OWASP: Social Engineering
- Anti-Pharming 101: What are pharming attacks?
Other
- Defcon 24: Phishing without failure and frustation
- TedX: This is what happens when you reply to spam email
- mx toolbox
- TedX: Phishing for phools
- The OSINT-ification of ISIS on the Dark Web
- Amazing mind reader reveals his gift
- VirusTotal
Phishing economy
- There Is No Free Phish: An Analysis of" Free" and Live Phishing Kits.
- PHISHING FACTORIES AND ECONOMIES
- The Economy of Phishing: A Survey of the Operations of the Phishing Market
- Evasive Phishing Driven by Phishing-as-a-Service
- There Is No Free Phish: An Analysis of" Free" and Live Phishing Kits.
Phishing ethics
- Phishing Filosophy: Some philosophy to consider before launching a phishing test against your own company
- Phishing Filosophy: Some philosophy to consider before launching a phishing test against your own company
Phishing quiz
Report sites
[↑](#table-of-contents) OSINT for phishers
Filtering techniques
- OSINT: How to find information on anyone
- Use buscador osint vm for conducting online investigations
- Using PGP Keys For OSINT
- Open-Source Intelligence (OSINT) Reconnaissance
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT Resources for 2019
- Compilation of recon workflows
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
- OSINT: How to find information on anyone
- A Guide to Open Source Intelligence Gathering (OSINT)
[↑](#table-of-contents) Payloads and filter evasion
Filtering techniques
- Evilginx - Advanced Phishing with Two-factor Authentication Bypass
- Evilginx 2 - Next Generation of Phishing 2FA Tokens
- Simulated Phishing Educational Campaign Guide
- Conducting USB Drop Tests With GoPhish
- Executing metasploit empire payloads from ms office documemt properties part 1 of 2
- Executing metasploit empire payloads from ms office documemt properties part 2 of 2
- Phishing with powerpoint
- Phishing with empire
- Abusing microsoft word features phishing subdoc
- Phishing against protected view
- csv injection
- Excel macros with powershell
- Hacking into whatsapp series part 2 phishing
- Macro-less code exec in msword
- MetaPhish: PDF Infection, Web SpearPhishing, TOR abuse & communications
- Microsoft office ntlm hashes via frameset
- Phishing Actor Using XOR Obfuscation Graduates to Enterprise Cloud Storage on AWS
- Powerpoint and custom actions
- Luckystrike a database backed evil macro generator
- Powerpoint and custom actions
- MetaPhish: PDF Infection, Web SpearPhishing, TOR abuse & communications
- Multi-platform macro phishing payload