Ignitetch/AdvPhishing

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

3268 stars · 839 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A command-line phishing toolkit that hosts fake login pages for popular services (Facebook, Google, Paytm, Zomato, etc.) and performs real-time OTP interception by relaying victim credentials to the legitimate site to trigger genuine OTPs. Intended for security awareness demonstrations and authorized penetration testing.

Use cases

• simulate phishing attacks in security awareness training
• demonstrate OTP bypass attacks during authorized pentests
• host fake login pages for social engineering demos
• capture OTP codes in a controlled red-team exercise
• teach ethical hacking students how phishing works
• test an organization's resilience to credential phishing

When to choose

• you are a security trainer demonstrating phishing risks to employees
• you run authorized red-team engagements and need OTP interception capability
• you teach ethical hacking and want a hands-on phishing demo tool

When to avoid

• you lack explicit written authorization to test the target
• you need a maintained tool with a license and active support - the README gates activation behind payment and has no license
• you want a general-purpose phishing simulation platform with reporting features
• you need legal compliance guarantees for security testing

Facets

cli-tool · maturity maintenance

penetration-testing security cli security penetration-testing cli python phishing otp-phishing social-engineering kali-linux security-testing credential-harvesting linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Ignitetch/AdvPhishing")