Skip to content

Latest commit

 

History

History
204 lines (135 loc) · 4.01 KB

README.md

File metadata and controls

204 lines (135 loc) · 4.01 KB
Raw

GooglePhish

GooglePhish

  • Google Account Phishing Tool using Python Django Framework.

  • Screenshots

    Screenshots Screenshots
    Google Login Page Phisher Home Page Image Google Login Page Phisher Password Page Image

Fast Installation Using docker

  • Pull created image

    • Install Docker

    • Pull googlephish image

      docker pull dmdhrumilmistry/googlephish

    • run docker image

      docker run -d -p 8000:8000 dmdhrumilmistry/googlephish -e

  • Build Image and run using build command

      sudo docker build -t googlephish .

  • You can specify your credentials using build arguments like this :

    sudo docker build -t googlephish -e "[email protected]" -e "DJANGO_SUPERUSER_USERNAME=admin" -e "DJANGO_SUPERUSER_PASSWORD=GooglePhish" .

  • Run docker container

    docker run -d -p 8000:8000 googlephish

If you have build the dockerfile with no arguments, the default credentials are :

  • Username : admin
  • Password : G00g13P#15#23

  • Using Docker Compose

     docker-compose up

    ⚠️ Doesn't work yet

Installation

  • Clone/Download repo

    git clone https://github.com/dmdhrumilmistry/GooglePhish.git

  • Create virtual environment

    python3 -m venv env

  • Load virtual environment

    source env/bin/activate

  • Install Poetry

    python3 -m pip install poetry

  • Install requirements

    poetry install

  • Check for errors

    python3 manage.py check

    Proceed if no errors were encountered.

  • migrate db

    python3 manage.py makemigrations
python3 manage.py migrate

  • Create user

    python3 manage.py createsuperuser

  • Collect static files

    python3 manage.py collectstatic

  • Run server

    python3 manage.py runserver

    Use --insecure tag if any issue is encountered while loading static files.

Update .env file

  • Env File template

    DJANGO_SECRET_KEY=secret_key
DEBUG=False
ALLOWED_HOSTS=*
CSRF_TRUSTED_ORIGINS=https://your-domain.ngrok-free.app,https://domain.localhost.run

  • Generate and copy new secret key

    python3 generate_new_key.py

  • Set DEBUG variable to True only during development stage, else use False

  • Set CSRF_TRUSTED_ORIGINS while using ssh tunnels such as ngrok and localhost.run.

  • update values in .env file

View Passwords using GooglePhish Dashboard Page

  • Dashboard login page

    http://127.0.0.1:8000/pawned

Start Server

python3 manage.py runserver

if static files are not loading, turn on debug mode or use

python3 manage.py runserver --insecure

For phishing over the internet

  • Start server

    python3 manage.py runserver

  • forward port using ssh

    ssh -R 80:localhost:8000 localhost.run

    8000 is port of localhost server. 80 is localhost.run server port. Localhost is service that helps you to expose your server running on localhost to the internet, visit their documentation for more info

  • Now send link to your victim

You can redirect user from google meet to your phishing page link using

https://meet.google.com/linkredirect?dest=your_link

Project Maintainer

Contributors

Contributors List

Have any Ideas 💡 or issue

  • Create an issue
  • Fork the repo, update script and create a Pull Request