Social Engineeringphishingtoolkitpenetration-testingsecurity-awareness

Gophish

Open-source phishing toolkit for businesses and penetration testers. Enables quick setup and execution of phishing engagements and security awareness training.

Description

Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training.

The tool is packaged for Kali Linux with an installed size of 55.83 MB. It relies on dependencies including adduser, libc6, libsqlite3-0, and sudo to function properly.

Users can leverage Gophish to simulate real-world phishing attacks in controlled environments, helping organizations test employee awareness and train staff on recognizing phishing attempts.

How It Works

Gophish operates by starting a local web server that opens a Web UI at https://127.0.0.1:3333 for campaign configuration and management. It utilizes SQLite for data storage via libsqlite3-0 dependency and provides a framework for creating phishing templates, sending emails, and tracking user interactions during simulated engagements.

Installation

bash
sudo apt install gophish

Examples

Starts Gophish and opens the Web UI at https://127.0.0.1:3333
gophish -h
Stops the running Gophish server
gophish-stop
Installs the Gophish package on Kali Linux
sudo apt install gophish
Launches Gophish, starting the phishing server and Web UI
gophish
Displays help information while starting the Gophish Web UI
gophish -h
Terminates the Gophish process after use
gophish-stop
Updated 2026-04-16kali.org ↗