King Phisher - Phishing Campaign Toolkit

King Phisher - Phishing Campaign Toolkit

King Phisher is a tool for testing and promoting user awareness by simulating real-world phishing attacks.

It features an easy to use, yet very flexible architecture allowing full control over both emails and server content.

King Phisher can be used to run campaigns ranging from simple awareness training to more complicated scenarios in which user aware content is served for harvesting credentials.

King Phisher Dashboard Screenshot


  • Run multiple phishing campaigns simultaneously
  • View detailed graphs regarding the campaign results
  • Send email with embedded images for a more legitimate appearance
  • Optional Two-Factor authentication
  • Highly flexible to accommodate different phishing goals
  • Powerful template system using the Jinja2 engine
  • Ability to capture credentials
  • SMS alerts regarding campaign status
  • Web page cloning capabilities
  • Integrated Sender Policy Framework (SPF) checks
  • Easy installation without setting up an additional web server
  • Geolocation of phishing visitors
  • Docker image for the server
  • Send email with calendar invitations
  • Plugin support for extending both the Client and Server

A small number of plugins are packaged with King Phisher and additional ones are available in the Plugins repository.


The King Phisher client is supported on Windows and Linux, while the King Phisher server is only supported on Linux.

Linux (Client & Server)

For installation on supported Linux distros (BackBox, CentOS [no Client Support], Debian, Fedora, Kali, Ubuntu):
wget -q && \
sudo bash ./

Windows (Client Only)

Download the latest Windows build: Download King Phisher

No comments

Powered by Blogger.