muraenateam/muraena

Health v2 · maintenance only

Adoption not part of the score

1079 stars · 191 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Muraena is an almost-transparent reverse proxy written in Go that automates phishing and post-phishing activities by dynamically proxying and transforming traffic between victims and legitimate websites. It is intended for security professionals running authorized phishing simulations and penetration tests.

Use cases

• set up a reverse proxy phishing site for an authorized penetration test
• run phishing simulations that mirror a legitimate website in real time
• capture credentials during a red-team engagement
• map phishing domains and subdomains to target origins automatically
• transform HTTP traffic between victim and legitimate site
• redirect unwanted or bot traffic away from a phishing campaign

When to choose

• you need a dynamic phishing proxy instead of maintaining static phishing pages
• you are conducting authorized phishing simulations or security awareness testing
• you need transparent subdomain mapping and traffic transformation for a phishing exercise

When to avoid

• you want to phish real users without authorization - this is illegal
• you need a general-purpose production reverse proxy like nginx or traefik
• you need static phishing page hosting rather than dynamic proxying

Facets

cli-tool · maturity active

proxy security http-server caching logging security penetration-testing networking web-development windows go cli phishing reverse-proxy phishing-simulation credential-capture red-team social-engineering security-testing linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="muraenateam/muraena")