Dark Fairytales From A Phisherman
summary
Automated phishing pipeline that boots an Amazon EC2 Debian image, deploys a fishing frenzy web UI, wires in BeEF integration and SendGrid SMTP, and drives configurable templates and client‑side exploits. Real runs harvest domain credentials (Outlook Web Access, VPN), an example yields a 40% success rate across ~46 targets and full AD compromise, with claimed runtimes and staging for about $10 total cost. No zero‑days required; Ruby tooling automates deployment.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 3:23Automation in phishing
- 10:15Compromising a government agency
- 30:09Targeting a journalist
- 36:57Future attack automation
- 48:45Victim reactions and response
- 51:16Q&A
related talks
37mAutomation Tactics for Modern Threat Emulation
27mCatching the Phisherman
29mHook, Line, and Tinker: A Dive into Phishing Campaign Sites
38mTeach a Man to Phish and You Feed Him for a Lifetime
45m Gollum: One anti-phish bot to rule them all
09mBridging the Gap: Developing Accessible Anti-Phishing Solutions
41mMuraena: The Unexpected Phish
50mCatPhish Automation - The Emerging Use of Artificial Intelligence in Social Engineering