This project simulates a phishing attack infrastructure using Zphisher, nginx reverse proxy, and a custom domain. The objective was to create a convincing phishing site hosted on a local Kali machine, using a fake but realistic-looking domain name and test it against a Windows victim system on the same network.

I explored both manual DNS redirection (hosts file) and automated spoofing (Ettercap) to redirect traffic to my phishing server.

1. Setup Zphisher

• Launched Zphisher on Kali (port 8080)
• Selected a Microsoft login template

 git clone --depth=1 <https://github.com/htr-tech/zphisher.git>

redirect to zphisher directory & run Zphisher.sh

sudo bash zphisher.sh 

select Microsoft login template

select 2 option Cloudflared and URL generate