Topics / #phishing

Phishing projects on GitHub

Phishing simulations, detection, and defense resources.

As of , the most-starred Phishing projects on GitHub are dns-blocklists (27.5K stars), zphisher (17K stars) and evilginx2 (15.7K stars). GitHub.Locker tracks 8 Phishing repositories with 108.7K stars combined. The fastest-growing on October 18 was dns-blocklists, with +50 stars in a day.

8Projects
108.7KStars in total
+95Stars in a day
Browse in the catalog →github.com/topics/phishing ↗

Hot right now

Most stars gained in a day · Oct 18

+50

dns-blocklists

hagezi/dns-blocklists · ★ 27.5K

A set of DNS blocklists that block ads, trackers, telemetry, phishing, malware, scams and other junk domains network-wide. They work for any region and with every common DNS server, ad blocker, and content blocker.

+19

Claude-Red

SnailSploit/Claude-Red · ★ 7.6K

claude-red is a curated library of offensive security skills for the Claude Skills system: structured SKILL.md files that prime Claude with expert-level methodology for one attack surface each, from SQLi to shellcode.

+9

zphisher

htr-tech/zphisher · ★ 17K

Zphisher is an automated phishing tool with 30+ ready-made login-page templates, written as a beginners-friendly shell script and intended purely for education.

+7

evilginx2

kgretzky/evilginx2 · ★ 15.7K

Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which lets an attacker bypass 2-factor authentication.

The all-time top

8 projects · by stars

  1. #1 · hagezi/dns-blocklists

    dns-blocklists

    A set of DNS blocklists that block ads, trackers, telemetry, phishing, malware, scams and other junk domains network-wide. They work for any region and with every common DNS server, ad blocker, and content blocker.

    27.5K
  2. #2 · htr-tech/zphisher

    zphisher

    Zphisher is an automated phishing tool with 30+ ready-made login-page templates, written as a beginners-friendly shell script and intended purely for education.

    17K
  3. #3 · kgretzky/evilginx2

    evilginx2

    Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which lets an attacker bypass 2-factor authentication.

    15.7K
  1. 4

    wifiphisher

    14.9Kwifiphisher/wifiphisher · Python

    Wifiphisher is a rogue access point framework for conducting Wi-Fi phishing and man-in-the-middle attacks against wireless clients, used in red team and penetration testing engagements.

  2. 5

    gophish

    14.3Kgophish/gophish · Go

    Gophish is an open-source phishing toolkit for businesses and penetration testers: it lets you quickly set up and run phishing engagements and security awareness training campaigns.

  3. 6

    Red-Teaming-Toolkit

    10.8Kinfosecn1nja/Red-Teaming-Toolkit

    It is a curated list of cutting-edge open-source security tools for red teamers and threat hunters, covering the full attack lifecycle from reconnaissance to exfiltration.

  4. 7

    Claude-Red

    7.6KSnailSploit/Claude-Red · Python

    claude-red is a curated library of offensive security skills for the Claude Skills system: structured SKILL.md files that prime Claude with expert-level methodology for one attack surface each, from SQLi to shellcode.

  5. 8

    BEAR-C2

    704S3N4T0R-0X0/BEAR-C2 · Python

    BEAR-C2 is an adversary simulation and emulation framework for red team operations, built around real-world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups.

Often tagged together