Kuyini inkosi yasePhisher?
I-King Phisher iyithuluzi elimangalisayo lokwenza ukuhlaselwa kobugebengu bokweba bufe.
Inobuciko bokwakhiwa okuguquguqukayo okuvumela ukuthi ulawule ngokuphelele ama-imeyili + okuqukethwe kuseva.
King phasher – I-Phishing Campaign ToolKit | Isifundo Esigcwele:
Uma ufuna ithuluzi elivulekile lomthombo wobugebengu bokweba ngePython.
King phasher kungaba ukukhetha okuhle.
Ithuluzi elivezwa ngokuphelele futhi eliguquguqukayo ngaphandle kwesibonisi sewebhu.
Okwenza kube nzima kakhulu ukuthola iseva yobugebengu bokweba imininingwane ebucayi.
“Ngokusho kwemibhalo esemthethweni, Iphinde isekele ukuthumela imiyalezo ngezithombe ezishumekiwe futhi inqume lapho ama-imeyili avulwa ngesithombe sokulandela umkhondo.”
Ama-King Phwele avelele:
- Kusho umthombo ovulekile ngokuphelele kusho ukuthi akunamkhawulo ekusetshenzisweni.
- Gijimani imikhankaso eminingi yobushiqela ngasikhathi sinye.
- Bheka amagrafu anemininingwane maqondana nemiphumela yomkhankaso.
- Thumela i-imeyili ngezithombe ezishumekiwe ukubukeka okusemthethweni.
- Ukuqinisekiswa kwe-PACTOR kokuzikhethela.
- Ivumelana nezimo kakhulu ukwamukela imigomo ehlukene yobugebengu bokweba imininingwane ebucayi.
- Uhlelo olunamandla lwethempulethi usebenzisa injini yeJinja2.
- Amandla wokuthwebula iziqinisekiso.
- Izaziso ze-SMS eziphathelene nesimo somkhankaso.
- Amanani ekhasi le-Web Cloning Amandla.
- Uhlaka lwenqubomgomo ehlanganisiwe (Spf) amasheke.
- Ukufakwa okulula ngaphandle kokusetha i-webserver eyengeziwe.
- I-Geolocation of Phishing Vishing Speciaders.
- Thumela i-imeyili enezimemo zekhalenda.
- Plugin ukusekelwa kokunweba bobabili Ikhasimende na- Iseva.
Ukufaka i-King Phisher:
Iqembu Cshawk lincoma ukuthi ufake King phasher phakathi kwa- /opt/king-phisher. Clone the repo:
$ CD / PT / # noma ukufakwa kwakho okufiselekayo kwe-git Clone
$ git clone https://GitHub.com/securestate/king-fisher.git
Bese ugijima install.sh okulotshiwe (Itholakala ku tools incwadi ephethe amagama namakheli abantu), okuzofaka wonke amaphakheji adingekayo bese usetha ukucushwa kweseva okuzenzakalelayo ngaphandle kokuhlupheka:
$ CD King-Phwefish
$ Amathuluzi we-CD
$ sudo ./install.sh
Ukubona izinketho zesikripthi, sebenzisa--help:
$ Amathuluzi / ukufaka.sh --help
Umsebenzi: faka [-h] [-n / -y]
I-King Phisher Faka umbhalo
Izimpikiswano ezingakhethwa
-h, --Siza ukukhombisa lo mlayezo wosizo nokuphuma
-ni, --Akunampendulo Cha kuyo yonke imibuzo
-y, --yebo phendula ngo-yebo kuyo yonke imibuzo
--yeqa iklayenti leqa ukufaka izingxenye zamakhasimende
--I-Skip-Server Yeqa ukufaka izingxenye zeseva
Ukufaka iklayenti, gijima umyalo olandelayo:
$ sudo ./install.sh --skip-server
Ukufakwa okusheshayo, gijima umyalo olandelayo:
$ I-WGET -Q https://github.com/securestate/kingphisher/raw/master/tools/install.sh && \
$ sudo bash ./install.sh
I-Windows (Iklayenti kuphela):
Chofoza inkinobho ethi "Landa" ezansi ukuze ulande ukwakhiwa kwakamuva.
Ukusetshenziswa okuyisisekelo
Ukuze uxhume bese uqala ukusebenzisa iklayenti, Uzodinga ukuqala King phasher iseva kuqala.
Sebenzisa umyalo olandelayo:
$ sudo ./kingphisherserserver
Abantu abaningi bahlangana nalolu daba olulandelayo:
KingPhisherserver: ukuphambeka: Izimpikiswano ezilandelayo ziyadingeka: I-Config_File
Uma ukhona. Gijimani umbhalo we-config:
$ ./I-KingPhisherserver Server_Config.yml
* I King phasher Iklayenti lixhumeka ngaphezulu kwe-SSH enhlanganweni yokuxhumana.
Inkonzo ye-SSH kumele ifakwe, -mile, Futhi kwaqala ngokuzimela kwe-King Phisher Stark.
Ukuqala iklayenti, Gijimani lo myalo:
$ Python3 Kingphuling
Manje, uzothuthuka ukuthi ufake iziqinisekiso (okufanayo ne-ssh).
Ngemuva kokuxhuma, Uzodinga ukuqinisekisa ukhiye we-server weseva kanye ne-ssh pass passpase.
Uma iklayenti lixhumeka ngempumelelo kwiseva, Uzobona ikhasi lomkhankaso.
Ngaphambi kokuthi uqhubeke, Lungiselela izilungiselelo zakho zeShpt.
Isifundo sevidiyo:
Amagama wokugcina:
I-King Phisher ingaba yithuluzi elihle kakhulu ongalisebenzisa.
Uma uthola inani kule ndatshana qiniseka ukuthi ushiya amazwana phansi ngezansi futhi ubonge ukusebenza kwethu kanzima.
