SocialFish V3 — Next Genaration Phishing Toolkit | Kali Linux
This command will install necessary tools to run SocialFish, this may take a little bit time depending on internet connection. The screenshot of the command is following:
Now we can crate a web interface that will help us to manage our phishing attacks, but we need to configure SocialFish by pick a username and password to login the web interface. We use following command to set a username and password:-
We can choose our username and password in above command.
Then SocialFish will finish it’s settings and we should be able to access the web interface by navigating to the URL http://0.0.0.0:5000/neptune in our browser. The screenshot is following:
We can see the login page here we type our username and password that we just set up, and then we click on “Login” to access the SocialFish portal.
Inside the SocialFish web interface, we can see many features and important information.
At the top we can see the field where we can put website for clone, and the website link redirection, and the URL for our attack. For our demonstration we choose twitter.com/login as target and twitter.com will be the redirecting link. If they already logged in, our phishing attack will look like a normal successful login process. After entering both links we need to click the lightning bolt to active the link as shown in the following screenshot.
Now we will open a separate browser window and open the attack link that is http://0.0.0.0:5000
This Attack link will work for LAN devices. That means this link only work for same network devices. WE can forward it globally via SSH. To know more read our Easy port forwarding using SSH tutorial. We can use Social engineering technique to increase the chance of clicking by target. To know more about social engineering ideas read our Social Engineering tutorial.
SocialFish version 3 is very advanced and simple phishing toolkit. We can edit custom pages even we can include beef-framework browser exploitation attack with phishing page, and much more capabilities comes with SocialFish v3.
If any error comes running SocialFish then try command:
instead of sudo pip install -r requirements.txt then run the SocialFish.
SocialFish is developing a mobile based interface to run SocialFish on smartphones. That will make this tool more handy.
How much enjoyed SocialFish v3 tutorial? Please leave valuable comments below or if you have any questions?
39 comments