Advphishing is a phishing tool that targets OTP verification systems across multiple platforms.
The tool addresses credential theft by creating fake authentication interfaces designed to capture one-time passwords from users. It works by generating phishing pages that mimic legitimate login and OTP verification flows for various services, tricking users into entering their credentials and verification codes into attacker-controlled forms.
This tool is designed for security testing and penetration testing scenarios where authorized professionals need to assess organizational vulnerability to phishing attacks. It includes pre-built phishing templates for numerous services including Google, Facebook, LinkedIn, WhatsApp, Amazon, Paytm, Zomato, Uber Eats, Hotstar, TikTok, and Ola. The tool also incorporates information gathering capabilities and IP location tracking features alongside the phishing functionality.
The project shows minimal development activity with no evidence of ongoing maintenance or updates to the codebase.
