Phishing attacks are easily performed against a single target. What if you want to automate and easily setup a client based attack against a list of targets??


As always, my solution was Perl.

I setup a custom YAML configuration file to make things a bit easier for daily usage.

http://spl0it.org/files/SEF/config.yaml

# YAML:1.0
# email is sent here
to: email_addresses.csv
# email is sent from this address
from: test@aol.com
# email subject
subject: "Email Subject"
# email type ( text or text/html )
type: text/html
# msg body file
msg: email_body.txt
# number of seconds to wait before next email
wait: 5
# prepend the first name to the email body
name: yes
# add custom signature from file
sig: yes
# signature file
sig_file: sig
# add an email attachment
attachment: yes
# path to file attachment
attachment_file: /tmp/test.jpg
# name of file attachment
attachment_file_name: funny.jpg
# type of attachment
attachment_file_type: image/jpg

The most important aspect is the email_addresses.csv which contains the full name of the target then a comma and the email address.

Example:

John Smith,john_smith@domain.com

I have even added the ability to:
* add an attachment
* append the first name to the email body
* add a signature to the bottom of the email body taken from a file
* wait X seconds between sending each email
* text or html email formats

http://spl0it.org/files/SEF/email.pl

Let me know what you think.

Regards,
Jabra