King Phisher is a tool for testing and promoting user awareness by simulating real-world phishing attacks.

It features an easy to use, yet very flexible architecture allowing full control over both emails and server content.

King Phisher can be used to run campaigns ranging from simple awareness training to more complicated scenarios in which user aware content is served for harvesting credentials.

Features:

• Run multiple phishing campaigns simultaneously
• View detailed graphs regarding the campaign results
• Send email with embedded images for a more legitimate appearance
• Optional Two-Factor authentication
• Highly flexible to accommodate different phishing goals
• Powerful template system using the Jinja2 engine
• Ability to capture credentials
• SMS alerts regarding campaign status
• Web page cloning capabilities
• Integrated Sender Policy Framework (SPF) checks
• Easy installation without setting up an additional web server
• Geolocation of phishing visitors
• Docker image for the server
• Send email with calendar invitations
• Plugin support for extending both the Client and Server

wget -q https://github.com/securestate/king-phisher/raw/master/tools/install.sh && \
 sudo bash ./install.sh