#KALI SOCIAL ENGINEERING TOOLKIT SPEAR PHISING MANUAL#
The tool reduces manual effort and avoids the necessity of coding language for capturing data from phishing websites. “Data can be centrally tracked from the results of phishing emails and websites. “The main advantage of SniperPhish is that a person can use this single toolkit to perform web and email phishing assessments,” Gem explained.
SniperPhish can create and schedule phishing email campaigns, create web and email tracker code, create custom tracker images, combine phishing sites with email campaigns for central tracking, track replies to phishing message, generate reports, and more. He’s now actively working on it, along with several contributors, and adding new features. Additionally, the data captured from this website needed to be mapped to the mail campaign, which was a time-consuming and often resulted in errors.”īased on these scenarios, he thought to developing his own tool to automate things and, within a few months, he already began testing it during the company’s engagements. For each project, we were required to code for tracking data from phishing websites. “For example, the client didn’t want us to capture the users’ passwords that were submitted to the phishing website. The available tools had certain limitations and were not very effective at simultaneously tracking data from the phishing emails and websites,” security consultant Gem George, the tool’s creator, told Help Net Security.
Most of the assessment included phishing campaigns, which means creating and hosting phishing websites and crafting email campaigns. “The idea to develop SniperPhish came to me in a period during which the company I previously worked with did many social engineering assessments. SniperPhish is an all-in-one open-source phishing toolkit that pentesters and other security professionals can use for setting up and executing email and web-based spear phishing campaigns.
0 kommentar(er)
