ZPhisher

Health v2 · maintenance only

Adoption not part of the score

16700 stars · 6266 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Zphisher is a beginner-friendly, automated phishing toolkit written in Bash with 30+ ready-made login page templates. It supports multiple tunneling options (localhost, Cloudflared, LocalXpose), URL masking, and Docker, and is intended for educational demonstrations of how phishing works.

Use cases

• demonstrate how phishing attacks work in security awareness training
• set up a phishing simulation for a red team exercise
• host a fake login page with tunneling for a classroom demo
• test employee susceptibility to credential phishing in an authorized pentest
• learn social engineering techniques in a lab environment

When to choose

• you need a quick, template-driven phishing demo for authorized security training
• you want a simple bash-based tool that runs on Linux or Termux without complex setup
• you need built-in tunneling and URL masking for a local phishing simulation

When to avoid

• you intend to phish real users without explicit authorization - this is illegal
• you need a full-featured commercial phishing simulation platform with reporting and campaign management
• you require stealth or evasion capabilities for adversarial engagements

Facets

cli-tool · maturity active

security penetration-testing cli security penetration-testing developer-tools cli phishing social-engineering security-awareness-training tunneling bash linux termux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="htr-tech/zphisher")