https://github.com/aenoshrajora/ghost-phish
Ghost-Phish is a Bash-based tool for simulating phishing attacks, offering customizable emails, phishing sites, and real-time user tracking to help test and improve cybersecurity defenses.
https://github.com/aenoshrajora/ghost-phish
bash cybersecurity penetration-testing phishing phishing-toolkit red-teaming security-testing simulation social-engineering
Last synced: 11 months ago
JSON representation
Ghost-Phish is a Bash-based tool for simulating phishing attacks, offering customizable emails, phishing sites, and real-time user tracking to help test and improve cybersecurity defenses.
- Host: GitHub
- URL: https://github.com/aenoshrajora/ghost-phish
- Owner: aenoshrajora
- License: gpl-3.0
- Created: 2025-04-30T17:36:47.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2025-05-07T17:35:24.000Z (about 1 year ago)
- Last Synced: 2025-05-09T01:45:35.508Z (about 1 year ago)
- Topics: bash, cybersecurity, penetration-testing, phishing, phishing-toolkit, red-teaming, security-testing, simulation, social-engineering
- Language: HTML
- Homepage:
- Size: 87.1 MB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
A beginners friendly, Automated phishing tool with 30+ templates.
##
Disclaimer
Any actions and or activities related to ghost-phish is solely your responsibility. The misuse of this toolkit can result in criminal charges brought against the persons in question. The contributors will not be held responsible in the event any criminal charges be brought against any individuals misusing this toolkit to break the law.
This toolkit contains materials that can be potentially damaging or dangerous for social media. Refer to the laws in your province/country before accessing, using,or in any other way utilizing this in a wrong way.
This Tool is made for educational purposes only. Do not attempt to violate the law with anything contained here. If this is your intention, then Get the hell out of here!
It only demonstrates "how phishing works". You shall not misuse the information to gain unauthorized access to someones social media. However you may try out this at your own risk.
##
### Features
- Latest and updated login pages.
- Beginners friendly
- Multiple tunneling options
- Localhost
- Cloudflared
- LocalXpose
- Mask URL support
- Docker support
##
### Installation
- Just, Clone this repository -
```
git clone --depth=1 https://github.com/aenoshrajora/Ghost-Phish.git
```
- Now go to cloned directory and run `ghost-phish.sh` -
```
$ cd Ghost-Phish
$ bash ghost-phish.sh
```
- On first launch, It'll install the dependencies and that's it. ***ghost-phish*** is installed.
##
### Installation (Termux)
You can easily install ghost-phish in Termux by using tur-repo
```
$ pkg install tur-repo
$ pkg install ghost-phish
$ ghost-phish
```
### A Note :
***Termux discourages hacking*** .. So never discuss anything related to *ghost-phish* in any of the termux discussion groups. For more check : [wiki](https://wiki.termux.com/wiki/Hacking)
### Installation via ".deb" file
- Download `.deb` files from the [**Latest Release**](https://github.com/aenoshrajora/Ghost-Phish/releases/latest)
- If you are using ***termux*** then download the `*_termux.deb`
- Install the `.deb` file by executing
```
apt install
```
Or
```
$ dpkg -i
$ apt install -f
```
##
### Run on Docker
- Docker Image Mirror:
- **DockerHub** :
```
docker pull shadowpacket/ghost-phish:latest
```
- Temporary Container
```
docker run --rm -ti shadowpacket/ghost-phish:latest
```
- Remember to mount the `auth` directory.
##
Dependencies
Ghost Phisher requires following programs to run properly -
- `git`
- `curl`
- `php`
> All the dependencies will be installed automatically when you run **Ghost Phish** for the first time.
Tested on
- **Ubuntu**
- **Kali Linux**
- **Parrot Sec**
- **Debian**
- **Arch**
- **Manjaro**
- **Fedora**
- **Termux**
##
:: Workflow ::
##
### Find Me on:
