SocialFish v3.0

Modern Dynamic Phishing Toolkit

SocialFish v3.0 brings powerful new features for cloning modern login pages, capturing cookies, and intercepting 2FA codes with a live operator panel.

🆕 What's New in v3.0

• Playwright Browser Automation — Clone modern JS-heavy login pages
• Full Cookie Capture & Analysis — Detailed metadata, security attributes, auth tokens
• Template System — Save and reuse clones across multiple victims
• Live OTP Interception Panel — Real-time 2FA code capture and injection
• MITM Reverse Proxy — ngrok/cloudflared tunneling with auto-installation
• 6 Clone Modes — Login-only, cookies-only, or full capture
• Multi-step Login Detection — Automatic heuristics for complex flows (Office365, etc.)
• Webhook Notifications — Real-time alerts to Slack, Discord, custom APIs
• Session Management — Full session tracking with export to JSON/CSV
• Network Interception — Log all HTTP requests/responses
• Victim Tracking — Track clicks, IP addresses, geolocation, device type

📖 Documentation

• FEATURES_v3.md — Complete feature guide with workflows
• IMPLEMENTATION_SUMMARY.md — Technical implementation details
• Wiki — Original setup and advanced guides

🚀 Quick Start

Option 1: Interactive Setup (Recommended)

python setup.py

• Install all dependencies
• Setup Playwright browsers
• Initialize database
• Configure tunneling (optional)
• Display quick-start guide

Option 2: Manual Setup

pip install -r requirements.txt
playwright install chromium
python SocialFish.py admin password

Then access: http://localhost:5000/neptune

🎯 Basic Workflow

• Create Template

/templates → New Template → Enter target URL

• Setup Tunnel (optional, for remote testing)

Click "Tunnel" → Choose ngrok/cloudflared → Authorize

• Generate Lure URL

Click "Lure" → Copy unguessable URL

• Send to Victims

Distribute lure URL in emails, messages, etc.

• Monitor in Real-Time

/sessions → View captured credentials, cookies, OTP codes
   /admin/otp_panel.html → Intercept & inject 2FA codes

🔧 Key Features

Templates Library

• Save clone configurations
• Reuse across multiple users
• Clone modes: both (credentials + cookies), login (credentials only), cookies (session only)
• Browser engines: Playwright (default), Selenium (optional)

Cookie Capture

• Full cookie jar (domain, path, secure, httponly, samesite, expiry)
• JavaScript cookie interception
• Auth token detection
• Security attribute analysis
• Export to JSON/CSV

Live OTP Panel

• WebSocket-based real-time communication
• Display victim session details
• Wait for OTP codes (manual or automatic)
• Inject OTP back to victim's browser
• Network activity monitoring

MITM & Reverse Proxy

• Auto-setup ngrok or cloudflared tunnels
• Reverse proxy all victim traffic
• Automatic cookie + credential capture
• No setup overhead

Webhook Notifications

• Slack, Discord, custom APIs
• Triggerable on credential submit, OTP received, session created
• JSON, form-encoded, or XML payloads

Multi-step & 2FA Detection

• Automatic heuristics for complex flows
• OTP endpoint detection
• Manual breakpoints for user interaction
• 2FA indicators in analytics

📊 Supported Sites

Works with any login page that uses:

• ✅ HTML forms
• ✅ JavaScript form submission
• ✅ XHR/fetch-based authentication
• ✅ SPA logins (React, Vue, Angular)
• ✅ 2FA/OTP flows
• ✅ Multi-step authentication (Office365, Gmail, GitHub, etc.)

🌐 API & CLI

Web API

# List templates
curl http://localhost:5000/templates
Generate lure URL
curl -X POST http://localhost:5000/lure/generate \
  -d "template_id=1"
View session
curl http://localhost:5000/session/1

CLI Commands

# Setup
python setup.py                    # Interactive setup
Tunneling
python core/tunnel_manager.py setup
python core/tunnel_manager.py start --type ngrok
Database
python core/db_migration.py

📂 Project Structure

SocialFish/
├── SocialFish.py               # Main Flask app
├── setup.py                    # Interactive setup wizard
├── FEATURES_v3.md             # Feature documentation
├── IMPLEMENTATION_SUMMARY.md   # Technical details
├── core/
│   ├── recorder_playwright.py  # Browser automation
│   ├── cookie_inspector.py     # Cookie analysis
│   ├── tunnel_manager.py       # Tunneling support
│   ├── db_migration.py         # Database schema
│   └── ... (other modules)
└── templates/
    └── admin/
        ├── templates.html      # Templates library UI
        ├── otp_panel.html     # OTP interception UI
        ├── sessions.html       # Session management UI
        └── ... (other templates)

🔐 Security & Ethics

⚠️ EDUCATIONAL USE ONLY

• ✅ Consent Required — Only test systems you own or have explicit written permission for
• ✅ Audit Logging — All operations logged with user attribution
• ✅ Data Protection — Implement proper data retention policies
• ✅ GDPR Compliance — Comply with local privacy regulations
• ✅ Disclosure — Report vulnerabilities responsibly

docker compose up