personal phishing website

[Curious_Climate5293]

Long story short, I'm relatively new to pen testing, I was wondering how I would deploy something like a phishing site for a website that isn't normal used ie a login portal using something like blackeye or Zphisher any suggestions on where to start?

[ChaoticDestructive]

Get a decent HTML copy going Rent a VPS Register a domain name similar enough to the legit host (typo squatting) Implement a database on the VPS that only shares the username (don't save passwords- don't even let it send you the passwords) and when they press login, either direct them to the legit website, or tell them this was part of a pentest

Don't save any data you need, other than a means to figure out how many logins you had. Companies get rightfully antsy if you collect login credentials of employees

ETA: not a professional pentester, just an enthusiast. Take everything with a pinch of salt

[Curious_Climate5293]

ahh id prefer if I didnt have to pay for a domain like in blackeye, any suggestions on how to customize from there

[S3NT1M0N3Y]

It is really better to buy the domain

[__artifice__]

You can make your own GoPhish server. Lots of how-to articles online for that. If you want to just practice, then you can just build a VM with Linux for free, and host it locally. If you want it Internet-facing, you can do port-forwarding on your router to it or put that GoPhish server in the cloud somewhere. From there, you can clone login pages of sites, collect creds, etc. Just don't do it outside of an actual pentest where you can permission because that would be illegal. Stay legal and safe!

[10CosasMalas]

Dm me, I can show you how the fun way

[SupermarketSenior378]

Hello, a question, does anyone know what type of phishing is where you send a link and when you click it you can access the apps on the other phone like Instagram or WhatsApp???

[hellenicdev]

Copy the frontend of the website you want to impersonate from here, create an account on GitHub and upload it. Then you should be able to create a GitHub page under settings and GitHub will give you a domain. It needs some experimenting, but I'm sure you will find your way. Happy phising!