XielQs / IPhisher

IPhisher is a tool for phishing using images

IPhisher

[•] Description

A phishing tool that uses images or files to phish people

[•] Installation

Install dependencies (git, nodejs and openssh)

• For Debian
  • sudo apt install git nodejs openssh-client -y
• For Arch
  • sudo pacman -S git nodejs openssh --noconfirm
• For Fedora
  • sudo yum install git nodejs openssh -y
• For Termux
  • pkg install git nodejs openssh -y

Pro tip: install wget if not installed

If you are a windows user, use this links: git, nodejs openssh

Clone this repository

• git clone https://github.com/gamerboytr/IPhisher

Enter the directory

• cd IPhisher

Run the tool

• npm start

Or use another another package manager

• yarn start
• pnpm start

Or directly run

wget -qP IPhisher https://raw.githubusercontent.com/gamerboytr/IPhisher/master/index.js && (cd IPhisher && node .)

# Or

curl --create-dirs --output-dir IPhisher -O https://raw.githubusercontent.com/gamerboytr/IPhisher/master/index.js && (cd IPhisher && node .)

Quick Note

If you want to serve your own files, create a directory named exposed and put your files into the exposed directory and run the tool. It will automatically detect the files and serve them.

IPhisher
├───exposed
│   ├───index.html
│   └───tools
│       └───ip.txt
├───index.js
├───package.json
└───README.md

<domain>/index.html
<domain>/tools/ip.txt

CLI Options

Usage: node index.js [-h] [-p PORT] [--path PATH]

Options:
      --version  Show version number  [boolean]
  -p, --port     Port to run on  [number]
      --path     Fake image path on server  [string]
  -h, --help     Show help  [boolean]

[•] Support

OS	Support Level
Linux	Excellent
Android	Excellent
MacOS	Never tested
WSL	Excellent
Windows	Excellent

Pro tip: if you want to use cloudflared on termux, open your hotspot before running the tool

[•] Features

• Cross platform (Support mostly linux)
• Dual Tunneling (Cloudflared, Localhostrun and Serveo)
• Easy to use
• Possible error diagnoser
• Portable file (Can be run from any directory)
• Get IP Address and many other details
• Serve any file (html, txt, js, etc.)

[•] Requirements

• NodeJS (>=12)
• SSH
• Wget or cURL

Info: If not found, all of the required packages will be installed on first run

[•] Tested on

• Windows
• WSL
• Ubuntu
• Kali-Linux
• Termux

[•] Disclaimer

This tool is developed for educational purposes. Here it demonstrates how phishing works. If anybody wants to gain unauthorized access to someones social media, he/she may try out this at his/her own risk. You have your own responsibilities and you are liable to any damage or violation of laws by this tool. The author is not responsible for any misuse of IPhisher!

[•] License

This project is licensed under MIT License. See the LICENSE file for more details.

[•] Credits

• XielQ (Author)