What tools are supported by this Claude Code skill?

This skill provides specialized guidance for industry-standard tools including Gophish, the Social Engineering Toolkit (SET), BeEF, Evilginx2, and various SMTP testing utilities.

How does it handle MFA/2FA testing?

The skill includes methodologies for using reverse proxy tools like Evilginx2 and Modlishka to test how well an organization's authentication flow holds up against man-in-the-middle phishing.

Can this skill help with security awareness training?

Yes, it is designed specifically to help security teams create realistic phishing simulations to educate employees and measure organizational vulnerability to social engineering.

Does it include templates for phishing attacks?

It provides implementation patterns for email templates, landing page clones, and malicious document macros (VBA) used in authorized testing scenarios.

Phishing and Social Engineering Toolkit

Name: Phishing and Social Engineering Toolkit
Author: trilwu

bytrilwu

0•

보안 및 테스팅

Conducts authorized social engineering assessments, phishing simulations, and credential harvesting to test organizational security awareness.

This skill empowers security professionals to plan and execute comprehensive social engineering engagements directly through Claude. It provides expert guidance on deploying phishing infrastructure using Gophish and the Social Engineering Toolkit (SET), crafting persuasive pretexts, and simulating advanced delivery methods like malicious macros, HTA files, and QR codes. Ideal for red teamers and penetration testers, it covers everything from initial reconnaissance and domain categorization to tracking campaign metrics and bypass strategies for multi-factor authentication, all while emphasizing operational security and ethical frameworks.

주요 기능

01Automated phishing infrastructure setup using Gophish and SET

02Detailed campaign tracking and reporting for security audits

03Advanced credential harvesting with custom PHP and Python backends

040 GitHub stars

05Diverse attack vector simulations including vishing, smishing, and USB drops

06Email spoofing and delivery optimization with SPF/DKIM/DMARC awareness

사용 사례

01Testing organizational resilience against MFA-bypass and credential harvesting

02Conducting red team engagements targeting human-factor vulnerabilities

03Executing corporate phishing simulations to test employee security awareness

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add trilwu/secskills phishing-social-engineering

For use in Claude.ai and ChatGPT

Download Skill