PK

Phishing Kit Registry

Three runnable kits, one container each. Every entry is a use case, not just a page.

checking stack How to run
–kits
–online
–captures
–use cases

Run the stack

1. Start

cd phishing-kits
cp .env.example .env
docker compose up -d --build

Each kit is its own container and its own port. Captures live in a named volume per kit.

2. Point a victim at it

Send the kit's lure, or hand over the landing URL. The attacker console is at /ops on the same port.

Set PUBLIC_HOST and PUBLIC_SCHEME in the stack .env before exposing it, so gallery links are correct.

3. Work the session

Ask for OTP/PIN, run JS, redirect to the real site or reset from the console. Everything is also appended to the kit volume and optionally Telegrammed.