evilgophish VS gophish

https://github.com/fin3ss3g0d/evilgophish comes shipped with SMS phishing capabilities, and is a combination of gophish and evilginx2 with Apache2 proxy in front

As part of this process, I started looking at the various avenues of attack that could bypass FIDO/FIDO2/U2F MFA style authentication. Previously I would use something like EvilGoPhish to phish employees/customers and steal their session cookies to bypass MFA but this does not work with U2F.

All evilginx2 fans checkout this project that provides campaign statistics for evilginx2 campaigns in the GoPhish dashboard and a real-time end-to-end encrypted feed https://github.com/fin3ss3g0d/evilgophish

this way is very phishable because today hackers just pay Google Ads for a concrete city to catch victims (who google) and redirect them to its phishing recourse (that could be created by gophish easily)

Try referring to https://getgophish.com/ which is an open source phishing tool, which can be used to run a phishing campaign

For free, GoPhish. If you have a handsome budget, Lucy.

https://github.com/gophish/gophish/issues/586 Found via https://docs.getgophish.com/user-guide/installation

For my first phishing campaigns, i used Gophish and i had good results. It will allow you to create the email, the landing page and all the necessary stuff around it. You also have mail and page templates that you can use and customize. Personally, I prefer to push the customization so that the mails look like real mails sent internally https://github.com/gophish/gophish/

Phishing with https://getgophish.com/