Offensive Phishing Campaigns
Plans and runs authorized phishing simulations: infrastructure, pretexts, payloads and credential capture.
- Repository
- SnailSploit/Claude-Red
- Stars
- 10,230
- Licence
- MIT
- Files
- 1 file
What it does
This skill gives an AI agent a detailed playbook for running phishing attacks as part of an authorized red team exercise, meaning a sanctioned test of how an organization's staff and email defenses respond to fake emails. Once installed, the agent can walk through the full campaign lifecycle: registering look-alike domains, configuring email sending and authentication records, setting up GoPhish and EvilGinx2, writing pretexts, and crafting payloads designed to get past email security gateways. It is a dual-use offensive security document. The file itself says it assumes written authorization and a defined scope before any campaign.
Great for
- Red team operators running sanctioned social engineering engagements with signed scope documents
- Security consultants who need a structured reference for phishing simulation methodology and ATT&CK mapping
- Blue teams wanting to understand the attacker tradecraft their email controls must detect
Skip it if
- Anyone without written authorization: the content provides ready-to-run steps for impersonating real organizations, harvesting credentials and bypassing MFA, which is illegal against systems you do not own or have permission to test.
- Beginners learning phishing awareness: the material is operational attack tradecraft (macro droppers, HTML smuggling, session relay), not training content for end users.
- Non-technical users: it assumes comfort with DNS, Postfix, VPS deployment and command-line tooling.
Try asking
- “Plan a phishing simulation against our staff for an authorized engagement, starting with domain selection and DNS setup.”
- “Walk me through configuring GoPhish with a TLS certificate and SMTP relay for a scoped red team test.”
- “Help me design a pretext for a vendor-impersonation phishing test, based on OSINT we are permitted to gather.”
- “Draft a campaign timeline and reporting template with affected-user counts for our client's final report.”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 1 original files, the MIT licence and an attribution note.
offensive-phishing.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip offensive-phishing.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip offensive-phishing.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Only use this with a signed rules-of-engagement document; the skill itself says authorization must come first, and you should keep it on hand.
- Test every campaign against your own accounts before sending to targets, and keep a log of timestamps and scope for the final report.
- The skill contains shell and VBA snippets that the agent may adapt; review every command yourself before running it, since it touches live DNS, mail servers and external domains.
What's inside
- SKILL.md
Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.