---
description: March 15, 2024
---

# Phishing

**Task 1: Brief**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FZulVkfGL0fHP45XHMuOW%2Fimage.png?alt=media&#x26;token=1c2efe7d-302c-476e-b9ab-4425303616e2" alt=""><figcaption></figcaption></figure>

**Task 2: Intro To Phishing Attacks**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FsjLF5z9haNPJK6KnORmA%2Fimage.png?alt=media&#x26;token=62ce4eb6-a8f3-401b-a16d-1f201b23667c" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FPX7M5sS6aaPIT2oooeZ0%2Fimage.png?alt=media&#x26;token=23067814-1210-4b64-b676-30c711b86068" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FAnyq9NAzYHvZalc2tklm%2Fimage.png?alt=media&#x26;token=43b1849d-88f7-4adf-8fa3-78ccba531cc4" alt=""><figcaption></figcaption></figure>

**Task 3: Writing Convincing Phishing Emails**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FWnztp1wzy4SpuY64wpK6%2Fimage.png?alt=media&#x26;token=0b4dfac1-12e5-456b-8cae-7465db50ffab" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FGA2Mp7Ztl1eDgWzdMJMB%2Fimage.png?alt=media&#x26;token=85a20f3e-db7d-48c9-aff5-34fe389a0f5f" alt=""><figcaption></figcaption></figure>

**Task 4: Phishing Infrastructure**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FPCE6me3NEIIAmCV3KA7X%2Fimage.png?alt=media&#x26;token=2be55802-c79e-450f-adc7-6a81d5c9032d" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2F2K6n7iyjaHxwZ1j9BYYZ%2Fimage.png?alt=media&#x26;token=b2a176e5-967c-4b7d-ae2f-bb81be0556f3" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FuBYQeKUCQ52f9v8pnmqX%2Fimage.png?alt=media&#x26;token=618df5bd-03d6-47f4-bc2f-9707b549203f" alt=""><figcaption></figcaption></figure>

**Task 5: Using GoPhish**

First we are going to login as admin user in the GoPhish website

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FUlzO6q6kLxJHQP7eu1vM%2Fimage.png?alt=media&#x26;token=f663e1c4-e804-4d16-aac5-0efa7c13a906" alt=""><figcaption></figcaption></figure>

Then we are just going to put this in the input boxes

Name: Local Server

From: noreply@redteam.thm

Host: 127.0.0.1:25

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FvPfHeHNvsczSVkRlfQgu%2Fimage.png?alt=media&#x26;token=f80babb5-27ed-45b0-a80f-49a3c94b3b3e" alt=""><figcaption></figcaption></figure>

After that we will go to "Landing Page" and put this html url in the html section and check "Capture Submitted Data" and "Capture Passwords"

{% code overflow="wrap" %}
```markup
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>ACME IT SUPPORT - Admin Panel</title>
    <style>
        body { font-family: "Ubuntu", monospace; text-align: center }
        div.login-form { margin:auto; width:300px; border:1px solid #ececec; padding:10px;text-align: left;font-size:13px;}
        div.login-form div input { margin-bottom:7px;}
        div.login-form input { width:280px;}
        div.login-form div:last-child { text-align: center; }
        div.login-form div:last-child input { width:100px;}
    </style>
</head>
<body>
    <h2>ACME IT SUPPORT</h2>
    <h3>Admin Panel</h3>
    <form method="post">
        <div class="login-form">
            <div>Username:</div>
            <div><input name="username"></div>
            <div>Password:</div>
            <div><input type="password" name="password"></div>
            <div><input type="submit" value="Login"></div>
        </div>
    </form>
</body>
</html>
```
{% endcode %}

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FfUWbWrRU6krudo5SYNh9%2Fimage.png?alt=media&#x26;token=156b6ee6-f57a-4201-9575-3617e19c5f78" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FmPCVuz5P9Osec2sBWKWX%2Fimage.png?alt=media&#x26;token=5d9868bb-2a00-4077-b8ff-efbaa5816c5b" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FT11OfpfKDR31iLvl5A1q%2Fimage.png?alt=media&#x26;token=60a52237-c0b2-4563-a306-7ff0e07c193d" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FDuUCaGbCgCqBsMEOQ3lX%2Fimage.png?alt=media&#x26;token=a29be28c-f09f-4c07-bd48-4fb85e0022ea" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FQJqjnSx1ryLxct21b1KY%2Fimage.png?alt=media&#x26;token=b5a296a3-1b84-4e09-95ba-6924e7afb66a" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FvqOnwW7WBipVvd5HZ4pQ%2Fimage.png?alt=media&#x26;token=985d4790-b7b1-4085-a0b3-ea186cbe1d20" alt=""><figcaption></figcaption></figure>

**Task 6: Droppers**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FQp4qtXo2G2PsQtBra4aI%2Fimage.png?alt=media&#x26;token=dc86ba81-a266-46c4-8efe-770e8e1f417a" alt=""><figcaption></figcaption></figure>

**Task 7: Choosing a Phishing Domain**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2F27lIPNHitB62LaK53xHs%2Fimage.png?alt=media&#x26;token=2ae1ee96-91a3-4c82-9378-c89d4334c18a" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FhnDWAHBeaisMiXtFbg7f%2Fimage.png?alt=media&#x26;token=6b92e3ee-cfb3-42f3-81a6-9976c0be2e72" alt=""><figcaption></figcaption></figure>

**Task 8: Using MS Office In Phishing**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2Fl1f3evfPm3nWm6V3NGDJ%2Fimage.png?alt=media&#x26;token=60dd03b9-186d-4071-95ad-9d1bd96e0a40" alt=""><figcaption></figcaption></figure>

**Task 9: Using Browser Exploits**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FjTZy3OiMBIZRRCwwQC22%2Fimage.png?alt=media&#x26;token=43d7cd33-76f0-49bc-adf0-1397beb5d150" alt=""><figcaption></figcaption></figure>

**Task 10: Phishing Practical**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FlTZ1RUMjFdWaZomUpSO5%2Fimage.png?alt=media&#x26;token=3be63b0d-aa92-4404-898e-95bb0c4c188c" alt=""><figcaption></figcaption></figure>
