How to install ShellPhish in termux | How to use ShellPhish in termux

What is ShellPhish?

A phishing attack is the most common attack to get access to the victim's credentials of any website.ShellPhish is one of the phishing tools that allows you to create a phishing link using termux.ShellPhish is created by thelinkchoice and it's a project on Github.If you wanna know more about shellfishing then just go to their Github page.

How shellPhish tool works?

Using this tool you can create a link that will look like an exact page of the social media, when the victim will log in using your link, you will get the Credential at your terminal.ShellPhish uses port forwarding using 2 methods one of them is SSH (which currently not working). the second one is Ngrok which I think has a bug but I will tell you how to use it properly.

NOTE: This post is only for Educational Purpse. This site and I do not support any criminal activity. If you are doing any sort of misuse of this information This site is not responsible for that. THIS SITE ONLY SUPPORT ETHICAL HACKING.

[Working 28/7/2022]

How to install ShellPhish in termux step-by-step: 

Step 1:

Update and upgrade the termux to the current date.

apt update && apt upgrade

Press N if ask about the version.

Step 2:

Install dependencies for ShellPhish without installing this tool you will get errors.

apt install php wget git

(While installing if it is asking do you wanna install just press y.)

This will install Php wget and git in termux which will be used while using ShellPhish.

If you already have any of this you can remove the name from command while installing.

Step 3:

Cloning the shellPhish project from the git Hub repository. (I have updated the link)

git clone https://github.com/AbirHasan2005/ShellPhish

Step 4:
Change directory to shellPhish.

cd Shellphish

Step 5:
Granting access permission to the shellPhish.sh file.

chmod +x shellphish.sh 

How to Use ShellPhish in termux:

Step 1:

Use the below command to run shellPhish.sh file in termux.

bash shellphish.sh

Step 2:
Now you have 29 available options. every social media name have an assigned number Like Instagram has 02 Netflix have 05 and so on.Here I am selecting Instagram but you can choose any of the 29 options. jsut type the number and press enter.

Step 3:
after selecting any social media you will see list of social engineering options about that website, you can select any one of them depending upon your phishing technique.

Step 4:

Here we need to select a port forwarding method and since all the port forwarding methods are malfunctioning, we have to use localhost. Type 1 to select localhost.

Step 5:

Now to create a tunnel from our local host to the internet we will use a single command. First of all open a new session in your termux(to open a new session you just have to swipe from left side of your screen to the right in termux terminal and then click on new session) and just copy and paste the below command but make sure to change your port number if you have a different one.

cloudflared tunnel --url  http://127.0.0.1:1275

Step 6:

The above command will start a cloudflared tunnel, and we will get a link as you can see in below screenshot, just copy that link and send it to the victim (please don't use this for illegal phishing).

Working:

In the below screenshot you can see that where you will find the credentials.

You will also find the IP of victim as well as the device which the victim is using(user agent).

Conclusion:

Sellphish is a great tool and freely available. you get the most of the decent pages to select from. But now are days we are getting better phishing tools for termux like ADVPhisher and Zphishier tool. I have updated the command of this tool so i should work fine, all the old issues are fixed and you can use this tool normally, if you sitll have any issue make sure to comment, Stay inspired and never stop learning, and as always Stay Ethical.👾