Phishing Club
Phishing Club is an open source, self hosted platform for phishing simulations and authorized red team phishing. Organizations install it on their own servers with a single command or through Docker, so every campaign and all the data it gathers stay in house.
Cost / License
- Free
- Open Source (AGPL-3.0)
EUPlatforms
- Self-Hosted
- Docker
Features
- Phishing
Phishing Club News & Activities
Recent activities
- jecoseeck reviewed Phishing Club
its best free opensource app for phishing training
- jecoseeck liked Phishing Club
- jecoseeck thinks Phishing is a important feature of Phishing Club
- POX updated Phishing Club
hackeronni added Phishing Club as alternative to Evilginx and Zphisher
topher-lima added Phishing Club as alternative to empowsec- hackeronni added Phishing Club as alternative to Evilginx
- hackeronni updated Phishing Club
- hackeronni updated Phishing Club
Phishing Club information
Developed by
Phishing Club Licensing
Open Source (AGPL-3.0) and Free product.Pricing
One time purchase ranging between $4000 and $8000, and / or subscription ranging between $339 and $794 per month.Written in
Alternatives
12 alternatives listedSupported Languages
- English
AlternativeTo Category
Security & PrivacyGitHub repository
- 225 Stars
- 30 Forks
- 0 Open Issues
- Updated
What is Phishing Club?
Phishing Club is an open source, self hosted platform for phishing simulations and authorized red team phishing. Organizations install it on their own servers with a single command or through Docker, so every campaign and all the data it gathers stay in house.
From the web console, operators build email and landing page lures, load targets from CSV or sync them over SCIM, group recipients, and schedule sends around working hours over SMTP or an OAuth capable API. As campaigns run, dashboards, per user event timelines, and automatically emailed PDF reports reveal who clicked, who reported the message, and who keeps falling for it. Multi tenancy lets service providers keep separate clients apart, and the admin area is protected by MFA and single sign on.
For offensive work it adds reverse proxy and remote browser phishing, session capture to bypass weak MFA, content and URL rewriting, page obfuscation, and JA4 and geo based access controls.
Comments and Reviews
its best free opensource app for phishing training