Information Gathering Password Attacks Pentesting Tools Web Application

SPF – SpeedPhish Framework

SPF – SpeedPhish Framework
-is a python tool designed to allow for quick recon and deployment of simple social engineering phishing exercises.

  • dnspython
  • twisted
  • PhantomJS


usage: [-h] [-f ] [-C ] [--all] [--test] [-e]
              [-g] [-s] [--simulate] [-w] [-W] [-d ]
              [-c <company's name>] [--ip ] [-v] [-y]
optional arguments:
  -h, --help           show this help message and exit
  -d           domain name to phish
  -c <company's name>  name of company to phish
  --ip     IP of webserver defaults to []
  -v, --verbosity      increase output verbosity
input files:
  -f         file containing list of email addresses
  -C       config file
enable flags:
  --all                enable ALL flags... same as (-e -g -s -w)
  --test               enable all flags EXCEPT sending of emails... same as
                       (-e -g --simulate -w -y -v -v)
  -e                   enable external tool utilization
  -g                   enable automated gathering of email targets
  -s                   enable automated sending of phishing emails to targets
  --simulate           simulate the sending of phishing emails to targets
  -w                   enable generation of phishing web sites
  -W                   leave web server running after termination of
  -y                   automatically answer yes to all questions


cd spf
python --test -d

or to just test the websites:

cd spf
python default.cfg

Video of sample usage:

Download SpeedPhish Framework

Post Comment