fin3ss3g0d/evilgophish

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2022 stars · 377 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

evilgophish is a Go-based framework combining evilginx3 and GoPhish for running authorized phishing and smishing campaigns with real-time credential capture and session cookie harvesting. It supports email and SMS campaigns, tracking, QR code generation, and live campaign feeds.

Use cases

• run authorized phishing awareness campaigns
• capture credentials and session cookies in red team engagements
• set up smishing (SMS phishing) campaigns
• simulate phishing with tracking pixels and campaign analytics
• host reverse-proxy phishing pages behind a real domain

When to choose

• you need evilginx-style session hijacking integrated with GoPhish campaign management
• you are a red teamer or pentester with written authorization to test social engineering
• you want combined email and SMS phishing simulation infrastructure

When to avoid

• you lack explicit written authorization for phishing engagements
• you need a fully supported, up-to-date tool - the public version lags the sponsor-only version
• you only need simple email security awareness training without reverse-proxy capture

Facets

application · maturity maintenance

security penetration-testing http-server email webhook security penetration-testing go self-hosted phishing-simulation red-team social-engineering evilginx gophish credential-harvesting session-hijacking smishing linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="fin3ss3g0d/evilgophish")