Phishing Like a Monarch With King Phisher

Explore a comprehensive presentation on King Phisher, a powerful phishing campaign toolkit, delivered at BSides Cleveland 2014. Learn about the platform's background, functionality, and various campaign types, including email-based attacks and credential harvesting techniques. Discover tips for effective usage, understand how King Phisher operates, and explore features like website variables, company message customization, and SMS alerts. Dive into the user interface, campaign management, and result analysis. Gain insights on increasing attack surface, handling smart users, and integrating with other tools like BeEF. Examine key points such as password schemas, Android browser exploits, and the importance of following security policies to prevent data loss.

Syllabus

Introduction
Background
Platform
Demo
Types of Campaigns
Emails
Training
Credential harvesting
Last by
Tips for using Kingfisher
How Kingfisher works
Gmails new feature
Website variables
Company messages
Smart users
Message important
Campaign privacy
If client is trained
SMS alert
Beef integration
Load arbitrary Java scripts remotely
Set up different machines
kingfishers interface
target list
attachment
edit tab
templates
preview
send
campaign
visits
information
visual dashboard
visits tab
multiple visits
increasing attack surface
previous email
demo fail
credentials tab
preferences server
Analyze results
Key points
Password schema
Android browser exploit
Data loss
Not following policy