Kate Li (Taiwan)的部落格

首頁

塔坦努斯/spf:速度框架

作者 iacona 時間 2020-03-08
all

SPF(SpeedPhish Framework)是一個python工具,用於快速偵察和部署簡單的社會工程釣魚練習。

apt-get update apt-get upgrade -y apt-get install git build-essential python-dev python-pip phantomjs -y apt install python3-twisted apt install python3-dnspython git clone --recursive https://github.com/tatanus/SPF.git usage: spf.py [-h] [-f <list.txt>] [-C <config.txt>] [--all] [--test] [-e] [-g] [-s] [--simulate] [-w] [-W] [-d <domain>] [-c <company's name>] [--ip <IP address>] [-v] [-y] optional arguments: -h, --help show this help message and exit -d <domain> domain name to phish -c <company's name> name of company to phish --ip <IP address> IP of webserver defaults to [192.168.1.124] -v, --verbosity increase output verbosity input files: -f <list.txt> file containing list of email addresses -C <config.txt> config file enable flags: --all enable ALL flags... same as (-e -g -s -w) --test enable all flags EXCEPT sending of emails... same as (-e -g --simulate -w -y -v -v) -e enable external tool utilization -g enable automated gathering of email targets -s enable automated sending of phishing emails to targets --simulate simulate the sending of phishing emails to targets -w enable generation of phishing web sites -W leave web server running after termination of spf.py misc: -y automatically answer yes to all questions

執行:

cd spf python3 spf.py --test -d example.com

或者只是測試一下網站:

cd spf python3 web.py default.cfg

德比孔2015視頻

BsidesLV 2015視頻

BsidesKnox 2015視頻

樣品使用視頻