MedusaPhisher
Phishing tool script which generate phishing websites with a link to send to victim, the link genrated comes together with a QR code.Medusa Phisher helps pentesters to evaluate how well employees recognize and respond to phishing attempts, highlighting weaknesses in awareness and training.
Install / Use
/learn @Adrilaw/MedusaPhisherREADME
Medusa Phisher v1.3
Medusa Phisher is a phishing tool script designed to create phishing pages for various online services. It allows users to set up phishing pages for services like Instagram, Facebook, Twitter, and more. The script facilitates hosting these phishing pages using localhost.run for tunnelling, making it easy to capture user credentials. <img width="1920" height="1080" alt="Image" src="https://github.com/user-attachments/assets/4bdc1c9b-497b-4094-9074-b291071341ca" />
Features
-
Create phishing pages for multiple online services.
-
Host phishing pages using localhost.run for easy access.
-
Customizable phishing page creation for a tailored approach.
-
Catch credentials entered into phishing pages for analysis.
-
Add option to choose either to use default port or custom.
-
The generated phishing link will be displayed, along with its QR code for easy access.
Dependencies
• PHP: Required for hosting the phishing pages locally.
• SSH: Necessary for creating SSH tunnels using localhost.run.
• XTERM: Necessary to generate link and QR code.
• Note: setup.sh installs those dependencies for you
Supported Environment
• Kali Linux
• Parrot security os
• Debian
• Ubuntu
• Arch
Usage
- Clone the repository:
git clone https://github.com/Adrilaw/MedusaPhisher.git - Navigate to the script directory:
cd MedusaPhisher - Ensure all dependencies are installed and configured (see Dependencies section).
- Grants execution permissions to medusa_phisher script:
chmod +x medusa_phisher.sh - Grants execution permissions to setup script:
chmod +x setup.sh - The script installs the required dependencies for running the Medusa Phisher script:
sudo ./setup.sh - Run the script:
sudo ./medusa_phisher.sh - Follow the on-screen menu to select a phishing target and start the phishing process. NOTE:The link is generated in the xterm terminal with a QR code too.
Demo
https://github.com/user-attachments/assets/43fcf6f2-987a-4f8c-91da-56efaff2258f
Disclaimer
This script is intended for educational purposes only. The misuse of this tool for illegal activities is strictly prohibited. The author assumes no responsibility for any misuse of this script.
Author
Adrilaw @ GitHub
Kidpentester @ xda-developers
License
MedusaPhisher is licensed under the GNU General Public License and the MedusaPhisher Commercial License- see the LICENSE file for details.
