gophish
TWINT
gophish | TWINT | |
---|---|---|
58 | 77 | |
10,660 | 13,272 | |
2.2% | - | |
2.8 | 0.0 | |
18 days ago | almost 2 years ago | |
Go | Python | |
GNU General Public License v3.0 or later | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
gophish
- Any self-host FOSS suites for running phishing testing campaigns?
-
How to create an ethical Phishing campaign?
Try referring to https://getgophish.com/ which is an open source phishing tool, which can be used to run a phishing campaign
- [Sysadmin] Gophish - Open source, dans l'outil de phishing à la maison
- Phishing simulation products for MSPs
-
Phishing Infrastructure Resources?
For free, GoPhish. If you have a handsome budget, Lucy.
-
How do I set up Gophish to start automatically on Ubuntu running on EC2?
https://github.com/gophish/gophish/issues/586 Found via https://docs.getgophish.com/user-guide/installation
-
Raise Cyber awareness trough custom Phishing or spear Phishing mails
For my first phishing campaigns, i used Gophish and i had good results. It will allow you to create the email, the landing page and all the necessary stuff around it. You also have mail and page templates that you can use and customize. Personally, I prefer to push the customization so that the mails look like real mails sent internally https://github.com/gophish/gophish/
- How to install Phishing tools on my Kali Linux VM
-
What are some security measures with low employee annoyance?
Phishing with https://getgophish.com/
-
Phishing Training
If you have the know-how and a server to hang it on, GoPhish is open source and also very good. There's a bit of trading time for money in this -- as GoPhish requires more content creation. But it also means you can get very granular in the phishing examples you create.
TWINT
-
Twitter will be purging accounts with no activity for several years soon. We need to archive as many as we can. Any ideas on Methods
twint is a project that can scrape twitter data via the webpages rather than the twitter API, which means that it can get more than the last 3200 tweets of an account. Unfortunately it seems that the repo was archived and is no longer in development, so I'm not sure if it even still works. It's also a bit heavy on dependencies and is written in Python, neither of which make it easier to install and use.
- How Do I Use Twint?
- NYC's transport authority will no longer post service alerts on Twitter
-
New OSINT tool
The tool doesn't work anymore since Twitter changed its APIs, but a good example is twint. Most people in OSINT are not highly technical and don't know their way around a CLI. On the other hand, a CLI tool is one of the quickest, lowest (dev) cost ways to release a tool to the public, and many developers who build tools for the OSINT community do so for free (open source).
- Show HN: Twitter API Reverse Engineered
-
What’s currently the best method to archive a twitter account?
You can try twint which is extensive and should be able to do that. Another is via this twitter downloader but might require multiple runs depending on what you want to archive.
-
Gbf.life will be gone at the end of April
They do have examples that don't specify a username such as number 3 on this page or this one on the main page: "twint -g="48.880048,2.385939,1km" -o file.csv --csv - Scrape Tweets from a radius of 1km around a place in Paris and export them to a csv file."
- Do I have to pay now for the Twitter API if I want to use it for data analysis?
-
Twitter’s $42,000-per-Month API Prices Out Nearly Everyone | Tiers will start at $500,000 a year for access to 0.3 percent of the company’s tweets. Researchers say that’s too much for too little data
This will motivate researchers to web scrape to circumvent these restrictions. Twint can scrape tweets and it supports proxies. It can also be multi threaded. A huge hassle and it's prone to breaking when the site changes.
-
Basically the current state of granblue
The comment I saw said they used this: https://github.com/twintproject/twint
What are some alternatives?
King Phisher - Phishing Campaign Toolkit
snscrape - A social networking service scraper in Python
authelia - The Single Sign-On Multi-Factor portal for web apps
Scweet - A simple and unlimited twitter scraper : scrape tweets, likes, retweets, following, followers, user info, images...
CamPhish - Grab cam shots from target's phone front camera or PC webcam just sending a link.
newspaper - newspaper3k is a news, full-text, and article metadata extraction in Python 3. Advanced docs:
Lean and Mean Docker containers - Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
twitterscraper - Scrape Twitter for Tweets
pwntools - CTF framework and exploit development library
gallery-dl - Command-line program to download image galleries and collections from several image hosting sites
Osintgram - Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
trafilatura - Python & command-line tool to gather text on the Web: web crawling/scraping, extraction of text, metadata, comments