Install and Use ShellPhish in termux

What is ShellPhish?

A deceptive tactic often used to acquire access to user credentials for various online platforms involves what's known as a phishing attack. ShellPhish, developed by thelinkchoice and accessible as an open-source project on GitHub, facilitates the creation of thes links. To explore ShellPhish further, you can visit its GitHub page for additional details.

How shellPhish tool works?

ShellPhish functions by allowing users to create deceptive links resembling genuine social media login pages. When individuals unknowingly log in using the provided link, Information entered by individuals is recorded and accessible to the user. ShellPhish primarily employs port forwarding through two methods: SSH, which is currently non-functional, and Ngrok, the latter of which may have a bug.

NOTE: This post is only for Educational Purpse. This site and I do not support any criminal activity. If you are doing any sort of misuse of this information This site is not responsible for that. THIS SITE ONLY SUPPORT ETHICAL HACKING.

How to install ShellPhish in termux: 

Step 1:

Update and upgrade the termux to the current date.

apt update && apt upgrade

Press N if ask about the version.

Step 2:

Install dependencies for ShellPhish without installing these packages you will get errors.

apt install php wget git

During the installation process, if prompted with a prompt asking if you want to proceed with the installation, simply press 'y' to confirm. This will install Php, wget, and git in Termux, all of which are essential components for utilizing ShellPhish. If you already have any of these components installed, you can omit their names from the command during installation.

Step 3:

Cloning the shellPhish project from the git Hub repository. (I have updated the link)

git clone https://github.com/AbirHasan2005/ShellPhish

Step 4:
Change directory to shellPhish.

cd Shellphish

Step 5:
Setting executable permissions for the shellPhish script.

chmod +x shellphish.sh 

How to Use ShellPhish in termux:

Step 1:

Use the below command to run shellPhish.sh file in termux.

bash shellphish.sh

Step 2:
Now you have 29 available options. every social media name have an assigned number Like Instagram has 02 Netflix have 05 and so on.Here I am selecting Instagram but you can choose any of the 29 options. jsut type the number and press enter.

Step 3:

After selecting a specific social media platform, a variety of social engineering options tailored to that website will be presented. Users can then choose from these options based on their intended method of operation.

Step 4:

Here we need to select a port forwarding method and since all the port forwarding methods are malfunctioning, we have to use localhost. Type 1 to select localhost.

Step 5:

Now to create a tunnel from our local host to the internet we will use a single command. First of all open a new session in your termux(to open a new session you just have to swipe from left side of your screen to the right in termux terminal and then click on new session) and just copy and paste the below command but make sure to change your port number if you have a different one.

cloudflared tunnel --url  http://127.0.0.1:1275

Step 6:

The above command sets up a cloudflared tunnel, resulting in a link that can be shared with the recipient. Please be mindful to use this tool responsibly and refrain from engaging in any unauthorized activities.

Working:

In the provided screenshot, you'll notice where the credentials are located. Additionally, you'll find details about the device being used, such as the user agent.

READ: [ Fix port forwarding issues in Termux ]

Conclusion:

Sellphish is a great tool and freely available. It has most of the decent pages. But keep in mind that this is not the only tool, people use other tools for the same purpose like ADVPhisher and Zphishier tool. If you didn't understood any part of the post. if you sitll have any issue make sure to comment, Stay inspired and never stop learning, and as always Stay Ethical.👾