Ross ROSS = Recommend OSS · open-source software intelligence for agents

UndeadSec/SocialFish

Phishing Tool & Information Collector observed · 2026-08-28

github.com/UndeadSec/SocialFish · CSS · BSD-3-Clause (permissive) observed · 2026-08-28

Health v2 · maintenance only

76/100

  • Activity 83
  • Release rhythm 52
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 3138
  • days_rel: 105
  • days_push: 105
  • n_releases_24m: 1

Full methodology

Adoption not part of the score

4851 stars · 1433 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

SocialFish is a Python-based phishing toolkit that clones modern login pages using Playwright browser automation and captures credentials, cookies, and 2FA/OTP codes through a live operator panel. It includes tunneling support, victim tracking, session export, and webhook notifications, and is intended for educational and authorized penetration-testing use.

Use cases

  • clone login pages for phishing awareness training
  • capture credentials and cookies during authorized pentests
  • intercept 2FA OTP codes in a controlled test
  • track victim clicks, IPs, and device types in a phishing simulation
  • export captured sessions to JSON or CSV for reporting
  • set up tunneling with ngrok or cloudflared for remote phishing tests

When to choose

  • you need a self-hosted phishing simulation tool with live credential and OTP capture
  • you want to clone modern JavaScript-heavy login pages for security training
  • you need webhook alerts to Slack or Discord during a phishing exercise

When to avoid

  • you lack explicit authorization to test the target users or organization
  • you need a general-purpose web scraper rather than a phishing toolkit
  • you want a managed commercial phishing-simulation platform with compliance reporting

Facets

application · maturity active

security web-scraping http-server webhook security penetration-testing python windows self-hosted phishing social-engineering pentesting credential-capture otp-interception playwright educational linux macos

1 source

Member repositories

RepositoryRoleHealth v2
UndeadSec/SocialFishmain76

For agents

markdown · JSON · MCP: product_card(name="UndeadSec/SocialFish")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem