Credit : @an0nud4y ( http://m4lici0u5.com )

Phishing Blogs/Talks

• BHIS | How to Build a Phishing Engagement - Coding TTP's : https://m.youtube.com/watch?si=YTjMa8XBusj_tPdc&v=VglCgoIjztE&feature=youtu.be

Red Team/Phishing Infra Automation

• https://github.com/dazzyddos/HSC24RedTeamInfra/blob/main/RedTeamInfraAutomation.pdf
• https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki

Domain Purchase and Categorization Techniques

• Check for Expired Domain and Possibly purchase the good ones

  • https://expireddomains.net/

• Domain Categorization

  • Bluecoat/Symantec - https://sitereview.bluecoat.com/#/
  • McAfee - https://www.trustedsource.org
  • Palo Alto Wildfire - https://urlfiltering.paloaltonetworks.com
  • Websense - https://csi.forcepoint.com & https://www.websense.com/content/SiteLookup.aspx (needs registration)
  • FortiGuard - https://www.fortiguard.com/webfilter
  • IBM X-force - https://exchange.xforce.ibmcloud.com
  • Cyren - https://www.cyren.com/security-center/url-category-check-gate
  • Checkpoint - https://www.checkpoint.com/urlcat/main.htm (needs registration)
  • Trend Micro - https://global.sitesafety.trendmicro.com/
  • Sophos - https://secure2.sophos.com/en-us/support/contact-support.aspx (submission only; no checking) (Click Submit a Sample -> Web Address)
  • BrightCloud - http://www.brightcloud.com/tools/url-ip-lookup.php
  • LightSpeed Systems - https://archive.lightspeedsystems.com/

• Automating Domain Reputation Checking/Submission

  • Domainhunter: https://github.com/threatexpress/domainhunter
  • Chameleon : https://github.com/mdsecactivebreach/Chameleon

Improve Phishing Email Writing Using Tools

• mgeeky : https://github.com/mgeeky/Penetration-Testing-Tools/tree/master/phishing
• HTML-Linter (avoid common phishing email words) : https://github.com/mgeeky/Penetration-Testing-Tools/blob/master/phishing/phishing-HTML-linter.py
• Decode-Spam-Headers : https://github.com/mgeeky/decode-spam-headers