https://github.com/zerofox-oss/phishpond

Because phishtank was taken.. explore phishing kits in a contained environment!
https://github.com/zerofox-oss/phishpond

Last synced: 3 months ago
JSON representation

Because phishtank was taken.. explore phishing kits in a contained environment!

• Host: GitHub
• URL: https://github.com/zerofox-oss/phishpond
• Owner: zerofox-oss
• License: bsd-3-clause-clear
• Created: 2020-08-14T20:24:07.000Z (about 4 years ago)
• Default Branch: master
• Last Pushed: 2022-05-12T17:27:41.000Z (over 2 years ago)
• Last Synced: 2024-05-02T18:56:29.303Z (6 months ago)
• Language: PHP
• Size: 4 MB
• Stars: 45
• Watchers: 9
• Forks: 13
• Open Issues: 9
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - zerofox-oss/phishpond - Because phishtank was taken.. explore phishing kits in a contained environment! (PHP)

README

        


  



## What is phishpond?

It's a pre-built docker environment which allows you to quickly, easily and safely spin up phishing kits for analysis. Out of the box you can browse, "mitm" web traffic, log mail calls to flat files and debug PHP code remotely.

## How to use

1. `git clone https://github.com/zerofox-oss/phishpond.git`

2. `cd ./phishpond/`

3. Configure any db connection strings within `docker-compose.yml`

4. `docker-compose up -d`

5. Browse to `http://localhost:5800` for the virtual browser

6. Browse to `http://localhost:8080` for mitmproxy

7. Within the virtual browser navigate to `http://phishpond.local`

(First time setup)

1. Open preferences within the virtual browser

2. Search `cert`

3. Click `view certificates`

4. Click the authorities tab

5. Click Import

6. Import `/config/certs/mitmproxy-ca-cert.pem`

7. Tick `Trust this CA to identify websites`

8. OK

You will need to repeat these steps every time you remove the `browser-volume`