Phishing for Shellz - Setting up a Phishing Campaign

Explore the intricacies of setting up a phishing campaign in this 45-minute conference talk from NolaCon 2017. Delve into various aspects of phishing engagements, including email minefield navigation, payload execution, and privilege escalation techniques. Learn about firewall bypass strategies, flyer walking, and the mechanics behind effective phishing attacks. Gain insights into essential frameworks and tools such as GoFish, FierceFish, and Kali. Discover methods for email tracking, web page creation, and user interaction through HTA files, JavaScript, and PHP. Master the art of social engineering and cybersecurity testing to enhance your organization's defenses against sophisticated phishing threats.

Intro
Fishing Engagements
Email minefield
Executing the payload
Email privilege escalation
Firewall bypass
Flyer walking
Phishing mechanics
How to learn
Framework Criteria
Installing GoFish
Installing FierceFish
Installing Kali
Email Tracking
GoFish
Morning Catch
Web Pages
HTA File
Second User Interaction
Third User Interaction
Click Once
JavaScript
PHP
Conclusion