ryhanson/phishery

Health v2 · maintenance only

Adoption not part of the score

1020 stars · 202 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Phishery is an SSL-enabled HTTP server written in Go that harvests credentials via Basic Authentication prompts, plus a tool to inject phishing URLs into .docx Word document templates. It is designed for phishing awareness testing and red-team engagements.

Use cases

• harvest credentials via basic auth prompts
• inject a phishing URL into a Word docx template
• run an SSL-enabled credential capture server
• simulate phishing attacks in security awareness training
• test how users respond to Word authentication dialogs

When to choose

• you need a lightweight Go binary for basic-auth credential phishing simulations
• you want to weaponize docx template URLs for authorized red-team engagements
• you need cross-platform credential harvesting without heavy dependencies

When to avoid

• you need modern phishing frameworks with email delivery and campaign tracking
• the project has not been updated since 2017 and may lack current features or fixes
• you lack authorization - using this against systems without consent is illegal

Facets

cli-tool · maturity maintenance

http-server security cli security penetration-testing windows cli phishing credential-harvesting basic-auth social-engineering word-docx red-team linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ryhanson/phishery")