Social Engineering

Gophish

Open-source phishing framework for awareness campaigns.

beginner

Linux

Windows

Docker

Exploitation

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

Only with explicit organizational authorization and legal review.

Authorized phishing simulations for security awareness programs.

Configure sending profile, landing page, campaign; track results ethically.

Industry standard for controlled phishing tests.

Commands & usage

./gophish

# Open https://localhost:3333

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

Social-Engineer Toolkit (SET)

Framework for social engineering labs (credential harvesters, payloads).

Evilginx2

MITM phishing framework for testing MFA bypass resilience (authorized only).