Protect your corporate IT network from hackers and other unwanted intruders with Proxy Sentinel™. Click here for all the details and get the peace of mind you deserve.
Back to our Homepage Proxy Sentinel™ high performance Internet proxy server and secure firewall solution Firewall Sentinel™ secure & powerful Internet firewall solution About Internet Security.ca and GCIS Frequently Asked Questions on Internet security issues Internet Security Industry News - Stay informed of what's happening Contact Internet Security.ca today and order your Proxy Sentinel™ or Firewall Sentinel™ server now!

An automated phishing toolkit to help penetration testers

Sponsered ads:
Read the latest IT news. Visit ItDirection.net. Updated several times daily.

If you need reliability when it comes to SMTP servers, get the best, get Port 587.

Get a powerful Linux Dual-Core dedicated server for less than $2.67 a day!

Share on Twitter.

November 21, 2016

A new automated phishing toolkit to better help internet security penetration testers exploit vulnerabilitie issues in the corporate sector is now available.

The well-known FortConsult hacker, better known as Antisnatchor dropped the phishing toolkit at the Kiwicon hacking event in Wellington New Zealand last week, offering whitehat hackers tips to better successfully target businesses through the world's most popular attack vector.

Dubbed "PhishLulz" the Ruby-based toolkit builds on some global expertise in phishing techniques. It spawns new Amazon EC2 cloud instances for each phishing campaign and combines a GUI from the PhishingFrenzy kit with the popular BeEF browser.

The toolkit also features a self-signed certificate authority, additional new phishing templates for various scenarios a typical malicious hacker would encounter.

Hackers using the toolkit will be able to send more convincing and much faster phishing emails from seemingly legitimate domains, be alerted immediately when login credentials are received, and send exploits and gain user target configuration information such as operating system and browser versions along with other running software via BeEF.

It also includes MailBoxBug which handles the fistful of popped email accounts that typically flows in at a rate of one a minute. It works on Office365 accounts with more support to follow.

Overall, phishing emails developed with PhishLulz are designed to trick discerning targets. An impressive 40 percent of staff at an unnamed Australian Government agency opened phishing emails and sent corporate VPN credentials during a previous security test engagement.

It's important to note that this exercise is only to help professionals better investigate corporate networks and various organizations in an effort to protect them in case of potential hacker attacks, which is what penetration testers do.

Source: FortConsult.

Sponsered ads:
Read the latest IT news. Visit ItDirection.net. Updated several times daily.

If you need reliability when it comes to SMTP servers, get the best, get Port 587.

Get a powerful Linux Dual-Core dedicated server for less than $2.67 a day!

Share on Twitter.


Home | Proxy Sentinel™ | Firewall Sentinel™ | FAQ | News | Sitemap | Contact
Copyright © Internet Security.ca    Terms of use    Privacy agreement    Legal disclaimer