[VilePyromancer]

Shellphish Tutorial (Social Engineering)

REQUIREMENTS

• Kali Linux USB
  
• Shellphish
  
• Internet Connection
  

First we have to install Shellphish through our terminal.

Code:

git clone https://github.com/thelinuxchoice/shellphish.git

If this does not work for you then here is an alternate way to install it.
-Go to the website https://github.com/thelinuxchoice/shellphish.git
-Click Clone or Download
-Click Download Zip
-After it is downloaded then open the file location of the download
-Right click on the newly downloaded file and click extract here
-Then open a new terminal window and type the following

Code:

cd Downloads

Code:

cd

Once it says Downloads in your terminal then type the following to see the files in the folder

Code:

ls

-My folder is named shellphish-master so I type

Code:

cd shellphish-master

-Once again type

Code:

ls

-The shellphish.sh file you see is the file we need. Then to make the file executable type

Code:

chmod +x shellphish.sh

-And finally to open the program

Code:

./shellphish.sh

If you installed this with git clone then you can just type in shellphish.sh and it should open up the program.

Once the program is installed and you run the program it will look like this:


Okay so now we have the program installed and ready to use!

First you want to choose the corresponding number to the website you want to clone.  
I'm doing Instagram so I type: 1
Then it will ask for a port forwarding option: Type 1
Then it will ask for a port: Type 2

Then you will get a page like this that has 2 links on it


I personally use the Serveo link. These are not just on your local network you can send them to anyone and they will get this login page!


Keep your shellphish terminal running! As long as it's running the site will stay live. When someone clicks on the site and enters their credentials it will look like this!


I used my own browser to test the link so I edited out my personal info in the last pic.


There are ways to get your own custom domain and there is more to the program but this is a basic tutorial for someone who is not very familiar with Linux or the program itself. Hope you guys enjoyed my first tutorial! If you have any questions let me know! Thanks for viewing!


EDIT! This tutorial is supposed to be used for educational purposes only! I used my own system and my own network when making the tutorial. I did go through the rules and check the rules and was kind of confused on whether  or not this tutorial was allowed! I also did a search for phishing in the search bar and I seen that other people had posted about it as well! If it is not allowed I apologize and will not be mad when it gets deleted!

[TerabyteGuy]

Great information!!!! Appreciate it, hope you keep sharing with the community

[mothered]

Quite a detailed tutorial and very well documented and Illustrated.

I have so many tasks pending, and this has just been added to the list.
Much appreciated.

[VilePyromancer]

Thank you very much for the feedback. If it is allowed I will continue to make tutorials for various programs and tools that I have knowledge of. I am by no means an expert and need to learn a lot more but I'll share what I can!

[Xexboss]

Great tutorial very good informationn mate

[ganc]

Good tutorial, but looks like serveo has been flagged by google as a phishing site lol... not many people will click through the warning.

[darkninja1980]

Shellphish Tutorial (Social Engineering)

REQUIREMENTS

• Kali Linux USB
  
• Shellphish
  
• Internet Connection
  

First we have to install Shellphish through our terminal.

Code:

git clone https://github.com/thelinuxchoice/shellphish.git

If this does not work for you then here is an alternate way to install it.
-Go to the website https://github.com/thelinuxchoice/shellphish.git
-Click Clone or Download
-Click Download Zip
-After it is downloaded then open the file location of the download
-Right click on the newly downloaded file and click extract here
-Then open a new terminal window and type the following

Code:

cd Downloads

Code:

cd

Once it says Downloads in your terminal then type the following to see the files in the folder

Code:

ls

-My folder is named shellphish-master so I type

Code:

cd shellphish-master

-Once again type

Code:

ls

-The shellphish.sh file you see is the file we need. Then to make the file executable type

Code:

chmod +x shellphish.sh

-And finally to open the program

Code:

./shellphish.sh

If you installed this with git clone then you can just type in shellphish.sh and it should open up the program.

Once the program is installed and you run the program it will look like this:


Okay so now we have the program installed and ready to use!

First you want to choose the corresponding number to the website you want to clone.  
I'm doing Instagram so I type: 1
Then it will ask for a port forwarding option: Type 1
Then it will ask for a port: Type 2

Then you will get a page like this that has 2 links on it


I personally use the Serveo link. These are not just on your local network you can send them to anyone and they will get this login page!


Keep your shellphish terminal running! As long as it's running the site will stay live. When someone clicks on the site and enters their credentials it will look like this!


I used my own browser to test the link so I edited out my personal info in the last pic.


There are ways to get your own custom domain and there is more to the program but this is a basic tutorial for someone who is not very familiar with Linux or the program itself. Hope you guys enjoyed my first tutorial! If you have any questions let me know! Thanks for viewing!


EDIT! This tutorial is supposed to be used for educational purposes only! I used my own system and my own network when making the tutorial. I did go through the rules and check the rules and was kind of confused on whether  or not this tutorial was allowed! I also did a search for phishing in the search bar and I seen that other people had posted about it as well! If it is not allowed I apologize and will not be mad when it gets deleted!

great tutorial guide too read.