Are you looking to gain initial access over an
adversary leveraging phishing tactics?
Hello, and welcome to Initial Access with King Phisher.
I'm Jeff Stein, and in this course,
I will take you through how you can use King Phisher to execute a
phishing attack in a red team environment against a target.
We will walk through enumeration techniques to help assist you in
creating a convincing phishing campaign to increase the likelihood
that your target will engage with your attack.
Additionally,
I will walk you through how you can further your initial access
objectives using the King Phisher feature set to enable the
harvesting of credentials from your victim.
Before we get started, let's jump into a quick overview of what King Phisher is.
King Phisher is a tool used for building complex phishing
attack scenarios, as well as coordinating and monitoring
successful phishing campaigns.
It originally was created by the SecureState team,
and I want to thank them for their work in developing the software.
It has many different features,
but overall has been developed for the ethical purpose of
testing and promoting user awareness through simulating
real‑world phishing attacks.
Over time, the feature set of the tool has expanded,
enabling different types of phishing attacks and reporting options.
King Phisher is an open source tool available on GitHub and
also comes preinstalled on Kali Linux.
In addition to the core functionality of the tool,
one of the great aspects of the project is the GitHub repository that
houses prebuilt content templates to use with King Phisher,
which assists in increasing the legitimacy of your phishing messages.
Also,
the King Phisher server is capable of creating and hosting
landing pages to complement your phishing attacks for
harvesting credentials from your targets.
Now that we have a good idea of how we will utilize King Phisher,
let's take a look at where the tool falls on the kill chain.
If you are familiar with the cyber kill chain,
you will see that the features of King Phisher can be used in between the
recon and exploit phases to gain initial access of a target.
If we map the techniques we will learn during this course to the
MITRE ATT&CK framework, we will be covering one of the attack
framework categories in initial access,
including valid accounts and phishing with coverage of the
spearphishing link and spearfishing via service subtechniques.
Now let's quickly review how our attack scenario will look with King Phisher.
We will start by targeting the email domain of our target.
In our scenario, this will be the mail system of Globomantics,
an evil corporation which we will target for initial access.
We will target the mail domain by sending a well‑crafted email
destined for the Globomantics CEO, convincing him to provide
us with his domain credentials.