King Phisher
Phishing Campaign Toolkit.
Overview
King Phisher is an open-source phishing campaign toolkit designed to be both flexible and easy to use. It allows security professionals to run multiple phishing campaigns simultaneously, with full control over email and server content. It's used for everything from simple awareness training to more complex scenarios involving credential harvesting.
✨ Key Features
- Run multiple campaigns simultaneously
- Web page cloning
- Credential harvesting
- Geo location of visitors
- Two-Factor authentication (optional)
- Jinja2 templating engine
- Plugin support for extensibility
🎯 Key Differentiators
- Server and client architecture
- Focus on campaign management
- Extensible via plugins
Unique Value: Provides a flexible and scalable open-source solution for managing sophisticated phishing campaigns.
🎯 Use Cases (3)
✅ Best For
- Running targeted phishing campaigns against specific user groups
- Cloning websites for credential harvesting
💡 Check With Vendor
Verify these considerations match your specific requirements:
- Comprehensive Learning Management System (LMS) for security training
🏆 Alternatives
Offers more advanced campaign management features than Gophish, such as geo-location and SMS alerts.
💻 Platforms
✅ Offline Mode Available
💰 Pricing
Free tier: Fully open-source, no limits.
🔄 Similar Tools in Social Engineering Tools
KnowBe4 Security Awareness Training
Platform for security awareness training and simulated phishing attacks to manage social engineering...
Cofense PhishMe
A SaaS platform that conditions employees to recognize and report phishing attacks through realistic...
Proofpoint Security Awareness Training
A comprehensive security awareness solution that educates employees on cybersecurity best practices....
Social-Engineer Toolkit (SET)
A Python-driven, open-source tool for simulating various types of social engineering attacks....
Gophish
An open-source phishing toolkit designed for businesses and penetration testers....
Infosec IQ (from Fortra)
A security awareness platform that combines phishing simulations with personalized training....