Secure your Users

Welcome to The PhishCamp Blog
Wednesday, March 10 2010 @ 01:14 PM MST

Email Article To a Friend View Printable Version

One Click. One Kill. Hacking Smartphone email clients

Email Security research shows that the majoe SmartPhone email clients do nothing to protect against targeted attacks.
Email Article To a Friend View Printable Version

JavaScript Browser Hacking

Targeted users in directed email attacks don't have to submit credentials to be hacked.. just visit the site.
Email Article To a Friend View Printable Version

Recon for Browser attacks

Looking for an effective way to identify client OS/Browser?
Email Article To a Friend View Printable Version

Social Engineering Vs. the Casinos

When you perform 40-50 Social Engineering assessments per year, you learn to pay attention to reactions and other small conversation details. I mean, we get paid to misdirect people... and the casinos are no different.
Email Article To a Friend View Printable Version

To release or not to release

For a couple years now, I have held back on releasing a fully functional "Open source' phishing tool. But not anymore.
Email Article To a Friend View Printable Version

EULA for testing end users

EULA agreements for online applications should allow the site owner to perform phishing assessments.
Email Article To a Friend View Printable Version

Gathering Email target addresses

Ever wondered how to get more "blackbox" email target addresses? Search results vary based on company size and culture.
Email Article To a Friend View Printable Version

Route 66 trip to Defcon

Don't ever buy a rental car. I have heard this before, but I can say that I agree 100%.
Email Article To a Friend View Printable Version

the $10 phishing attack vs. phishcamp

I hear a lot of technical guys saying that they can offer the same service for $10. I want to prove that its not possible, unless your an attacker. Sure, you can send a phishing attack in a couple hours with free email scripts etc, but it's not going to be near commercial quality. How about the scenarios? Filter evasion? The report? Metrics and analysis of user behavior? Training? It just can't be done.
Email Article To a Friend View Printable Version

Email Attack Payloads

When you think of a phishing attack, you think of a scam sent out to millions of people targeting a brand or a bank. The payload is nothing but a credential harvesting script right? WRONG! You have to think outside the box.