We are happy to announce the release of King Phisher version 1.4.
King Phisher has supported Python 3 for several versions now and is now standard for new installations of King Phisher starting with this release. Anyone that utilizes the tool/install.sh script to install King Phisher will have it installed and configured utilizing Python 3. Users that use this method will have to use python3 ./KingPhisher to start the King Phisher Client from the command line after installation while Python 2 is still supported. Python 2 is being phased out in the King Phisher project with a goal of being removed in the second quarter of 2017. We recommend to those using King Phisher to upgrade and begin the transition to Python 3. More information can be found on the Wiki Python 3.
With this change, King Phisher now has a tools/uninstall.sh script. The uninstall script will remove the service file for the server, and delete the desktop icon. There are options to also delete the King Phisher directory as well as the database. Use the two options with CAUTION as all data will be lost if utilized.
King Phisher now has built in support for campaign comparisons. You can select multiple campaigns and view the number of visits, and credentials submitted across those campaigns. This will provide quick analytics to see how effective or ineffective the campaigns have been.
King Phisher Server utilizes AdvancedHTTPServer to host the landing pages for phishing campaigns which has recently been updated with new features, some of which we have already implemented into King Phisher. There is now support to host the King Phisher Server on multiple interfaces and ports at the same time. This allows users to for example, run HTTP on port 80 and HTTPS on port 443 from the same instance. Furthermore, we have added support for multiple SSL hostnames via SNI. This allows multiple domains to each use a separate SSL certificate for added authenticity.
With the
version 1.3 release the King Phisher Client received plugin support. Now we have taken that same support and moved it into the server as well. We have already released one plugin for the server that provides XMPP notifications via a chat bot. This bot will report when someone creates a campaign, a new visit is created or new credentials are submitted all in real time. For all King Phisher plugins please visit King-Phisher-Plugins repository. The wiki server plugins documentation includes steps for how users can install plugins and provides a link for developer documentation on how users can build their own.
For those utilizing GTK 3.20, King Phisher will now have improved theme support. This is the cleanest implementation of the theme which leverages upstream changes in the GTK library and switches to using a SASS formatted theme file.
We have added additional Jinja variables for server side websites. The King Phishers Wiki Templates page has a complete list of all Jinja variables, keywords etc. and where they can be utilized.
Happy Phishing!
