Zphisher - Automated Phishing Tool in Kali Linux

What is Zphisher?

Zphisher is a powerful open-source phishing tool. Zphisher contains phishing templates for popular websites like Facebook, Gmail, Instagram, and Snapchat. We can also use custom templates provided by third parties.

The Zphisher tool is an upgraded version of an existing tool called Shellphish. This upgraded version carries over the older source code of the Shellphish tool but also has some upgrades and optimizations over the older tool.

The developer behind the Zphisher tool is Tahmid Rayat, from Bangladesh. They are known as 'htr-tech' on GitHub. The Zphisher GitHub is https://github.com/htr-tech/zphisher. The tool is written in PHP while the templates are written in HTML and CSS.

Zphisher can be run on unix-like systems like Linux and even Android using platforms like Termux.

Uses and Features of Zphisher

• Zphisher is an open-source phishing tool
• It is pre-packaged in Kali Linux, a Linux distribution designed for pen-testing.
• Zphisher is a simple tool written using PHP with its templates written in HTML and CSS.
• Zphisher provides templates for popular websites like Gmail, Facebook, Instagram, Snapchat, WordPress, and Spotify.
• Zphisher also supports using custom third-party templates.

Hiring Partners:

GoogleAmazonMicrosoftFlipkartAdobe1200+ more

Installation

The Zphisher tool can be installed from the bash script in the git repository of the Zphisher tool. Zphisher is available out of the box in Kali Linux.

Install Zphisher on a Linux distribution

Zphisher GitHub has all the instructions required to install Zphisher.

First, we clone the repository by running the command:

Then we move into this cloned directory by running the command: cd zphisher

Once inside this directory, we run the Zphisher bash script that installs all the dependencies required by the Zphisher tool and installs them. The script then installs and sets up Zphisher.

We can run the bash script by running the command:

This installs the Zphisher tool on the Linux system.

Install Zphisher on Termux

Termux is an Android application that provides a Linux-like terminal interface on an Android device.

Let's see how to install Zphisher in Termux:

• Start by adding the tur-repo on Termux by running the command:

• Then install the zphisher package using pkg by running:

• Once done, the Zphisher tool is installed on Termux. To run Zphisher, we call the executable by running: zphisher

Using Zphisher Tool

The Zphisher tool is operated from the command line, i.e., from the terminal of a Linux distribution.

To start the tool, run the phisher command from the terminal after installing it. We can also use the shell script used to install from zphisher github to run it.

Now select a template. This template is a clone of the login page of the website selected and is used for phishing purposes. We can select any template entering its index number in Zphisher, for example: 02 for Instagram.

The zphisher tool then asks the method for generating a URL. We need to select the URL generation method that suits us. This depends on various factors like service availability, the time required for the generated URL to stay up, etc.

Once selected, zphisher generates a URL shared with the victim. Once the victim opens the URL, their IP address is saved in a file.

If the victim enters their credentials, they are saved inside a text file as well and they are redirected to the original site from the fake phishing page.

The same process can be used with templates for some other sites as well to retrieve an individual's credentials.

See More

Best Linux Distros