Audience
Companies, red teams, security service providers
About Phishing Club
Phishing Club is an open source phishing simulation and red team phishing framework for authorized security testing. Self host it on your own server via a one line installer or Docker.
Plan, launch, and measure realistic campaigns from a single Go binary with an embedded web UI, HTTP/HTTPS phishing servers, and a REST API.
Features: multi stage phishing flows, flexible scheduling, multiple domains with automatic TLS, SMTP or custom API delivery with OAuth, recipient groups with CSV import and SCIM, PDF campaign reports, analytics, multi tenancy, MFA and
SSO (Entra ID, OIDC), webhooks, and in app updates.
Red team and AiTM: reverse proxy phishing to capture sessions, remote browser phishing, DOM and URL rewriting, dynamic obfuscation, JA4 and geo IP filtering, and device code phishing.
Other Popular Alternatives & Related Software
PhishByte
PhishByte is an Australian phishing simulation and cyber security awareness training platform built for small and medium-sized businesses. Designed to reduce human cyber risk, PhishByte delivers realistic phishing simulations, short interactive training modules, and real-time Human Risk Scores that track team progress over time.
Unlike one-off compliance tick boxes, PhishByte builds lasting behavioural change through continuous simulation and just-in-time learning. When an employee clicks a phishing link, they receive an immediate training intervention — making the lesson relevant and memorable.
PhishByte aligns with the Australian Cyber Security Centre's Essential Eight framework and helps organisations meet Privacy Act obligations. It requires no dedicated IT team and is simple to set up and manage.
Plans start free for up to 10 users, with Professional and Enterprise tiers available for growing teams.
Learn more
C9Phish
C9Phish by C9Lab is a comprehensive phishing simulation and training platform designed to help organizations identify, measure, and reduce cybersecurity risks related to phishing attacks. By simulating real-world phishing attempts, C9Phish enables companies to test employee awareness, pinpoint vulnerabilities, and strengthen their overall security posture. It allows security teams to create customizable phishing campaigns that mimic various attack vectors, including email, SMS, and social engineering tactics, providing a realistic training environment. With detailed analytics and reporting tools, organizations can track employee responses, measure risk levels, and identify departments or individuals needing further training. C9Phish also offers automated training modules, delivering targeted education and feedback to employees who fall for simulated attacks, helping them recognize and avoid future threats.
Learn more
Gophish
Gophish is a powerful, open-source phishing framework that makes it easy to test your organization's exposure to phishing. Gophish makes it easy to create or import pixel-perfect phishing templates. Our web UI includes a full HTML editor, making it easy to customize your templates right in your browser. Launch the campaign and phishing emails are sent in the background. You can also schedule campaigns to launch whenever you'd like. Detailed results are delivered in near real-time. Results can be exported for use in reports. Gophish has a gorgeous web interface. Import existing websites and emails, enable email open tracking, and more with a single click. Gophish updates results automatically. Using the UI, you can view a timeline for each recipient, tracking email opens, link clicks, submitted credentials, and more. Everything in Gophish is designed to "just work". It's so easy to setup, easy to use, and quick to give powerful results that you'll think it's magic.
Learn more
Terranova Security
Terranova Security makes it easy to build cybersecurity awareness programs that feature the industry’s highest-quality training content and real-world phishing simulations. As a result, any employee can better understand phishing, social engineering, data privacy, compliance, and other critical best practices.
Learn more
Pricing
Starting Price:
0
Pricing Details:
Open source and free
Free Version:
Free Version available.
Company Information
Phishing Club
Founded: 2025
Denmark
phishing.club
Videos and Screen Captures
Dashboard - Stats
Other Useful Business Software
MongoDB Atlas runs apps anywhere
MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
Product Details
Platforms Supported
Linux
Training
Documentation
Support
Online
