ustayready/CredSniper

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1392 stars · 303 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

CredSniper is a phishing framework built on Python's Flask micro-framework and Jinja2 templating that launches realistic phishing sites with SSL via Let's Encrypt. It captures credentials and 2FA tokens, exposes them through a token-secured API, and supports modular clones of login pages such as Gmail.

Use cases

• launch a phishing site with SSL to capture credentials during a penetration test
• phish two-factor authentication tokens with cloned login flows
• clone a Gmail login page for a red team engagement
• feed captured credentials into other tools via an API
• build custom phishing modules with Jinja2 templates

When to choose

• you are an authorized red team or pentester needing a 2FA-aware phishing framework
• you want SSL-protected phishing sites with modular, template-based login clones
• you need an API to integrate harvested credentials into other tooling

When to avoid

• you lack explicit authorization to test the target organization
• you need a general-purpose web framework rather than a phishing tool
• you need actively maintained software with recent updates and support

Facets

application · maturity maintenance

security web-framework http-server api-framework templating security penetration-testing web-development python self-hosted phishing penetration-testing credential-harvesting two-factor-authentication social-engineering red-team lets-encrypt flask web-server linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ustayready/CredSniper")