What tools are supported by this Claude Code skill?

This skill provides specialized guidance for industry-standard tools including Gophish, the Social Engineering Toolkit (SET), BeEF, Evilginx2, and various SMTP testing utilities.

How does it handle MFA/2FA testing?

The skill includes methodologies for using reverse proxy tools like Evilginx2 and Modlishka to test how well an organization's authentication flow holds up against man-in-the-middle phishing.

Can this skill help with security awareness training?

Yes, it is designed specifically to help security teams create realistic phishing simulations to educate employees and measure organizational vulnerability to social engineering.

Does it include templates for phishing attacks?

It provides implementation patterns for email templates, landing page clones, and malicious document macros (VBA) used in authorized testing scenarios.

Phishing and Social Engineering Toolkit

Name: Phishing and Social Engineering Toolkit
Author: trilwu

bytrilwu

セキュリティとテスト

Conducts authorized social engineering assessments, phishing simulations, and credential harvesting to test organizational security awareness.

概要

This skill empowers security professionals to plan and execute comprehensive social engineering engagements directly through Claude. It provides expert guidance on deploying phishing infrastructure using Gophish and the Social Engineering Toolkit (SET), crafting persuasive pretexts, and simulating advanced delivery methods like malicious macros, HTA files, and QR codes. Ideal for red teamers and penetration testers, it covers everything from initial reconnaissance and domain categorization to tracking campaign metrics and bypass strategies for multi-factor authentication, all while emphasizing operational security and ethical frameworks.

主な機能

Automated phishing infrastructure setup using Gophish and SET
Detailed campaign tracking and reporting for security audits
Advanced credential harvesting with custom PHP and Python backends
0 GitHub stars
Diverse attack vector simulations including vishing, smishing, and USB drops
Email spoofing and delivery optimization with SPF/DKIM/DMARC awareness

ユースケース

Testing organizational resilience against MFA-bypass and credential harvesting
Conducting red team engagements targeting human-factor vulnerabilities
Executing corporate phishing simulations to test employee security awareness

概要

主な機能

Automated phishing infrastructure setup using Gophish and SET
Detailed campaign tracking and reporting for security audits
Advanced credential harvesting with custom PHP and Python backends
0 GitHub stars
Diverse attack vector simulations including vishing, smishing, and USB drops
Email spoofing and delivery optimization with SPF/DKIM/DMARC awareness

ユースケース

Testing organizational resilience against MFA-bypass and credential harvesting
Conducting red team engagements targeting human-factor vulnerabilities
Executing corporate phishing simulations to test employee security awareness