An automated phishing toolkit for security research, with 30+ templates.

---

Disclaimer

Any actions and/or activities related to NullPhish are solely your responsibility.

The misuse of this toolkit may result in criminal charges being brought against the individuals involved. The contributors will not be held responsible in the event that any criminal charges are brought against anyone misusing this toolkit to break the law.

This toolkit contains materials that can be potentially damaging or dangerous for social media. Refer to the laws in your province/country before accessing, using, or otherwise utilizing this project in an improper manner.

This tool is made for educational purposes only. Do not attempt to violate the law with anything contained here.

It only demonstrates "how phishing works". You shall not misuse the information to gain unauthorized access to someone's social media accounts.

Use at your own risk.

Previously a fork of Zphisher, now maintained as a standalone repository.

---

Features

• Latest and updated login pages

• Beginner friendly

• Multiple tunneling options

  • Localhost
  • Cloudflared
  • Serveo
  • Localhost.run
  • Pinggy

• Mask URL support

• Docker support

---

Installation

Clone this repository:

git clone --depth=1 https://github.com/r4tur1/NullPhish.git

Go to the cloned directory and run:

cd NullPhish
bash nullphish.sh

On first launch, dependencies will be installed automatically.

---

Installation (Termux)

pkg install tur-repo
pkg install nullphish
nullphish

Termux discourages hacking — never discuss anything related to this tool in Termux discussion groups.

See: https://wiki.termux.com/wiki/Hacking

---

Installation via .deb

Download the .deb packages from the latest release.

For Termux, download the *_termux.deb variant.

Install using:

apt install <path-to-deb-file>

or:

dpkg -i <path-to-deb-file>
apt install -f

---

Run on Docker

Pull the image:

DockerHub

docker pull r4tur1/nullphish:latest

GHCR

docker pull ghcr.io/r4tur1/nullphish:latest

Using the wrapper script:

curl -LO https://raw.githubusercontent.com/r4tur1/NullPhish/master/run-docker.sh
bash run-docker.sh

Temporary container:

docker run --rm -ti r4tur1/nullphish

Remember to mount the auth directory.

---

Dependencies

NullPhish requires:

• git
• curl
• php

All dependencies are installed automatically on first run.

Tested On

• Ubuntu
• Debian
• Arch
• Manjaro
• Fedora
• Termux

---

Workflow

---

🚧 Development Roadmap

Core Features

Feature	Status
Discord Webhook Integration	✅ Completed
Telegram Integration	✅ Completed

🔄 Template Refresh Progress

Completed Updates

adobe • badoo • discord • dropbox • instagram

Pending Updates

ebay • facebook • fb_advanced • fb_messenger • fb_security
github • gitlab • google • google_new • google_poll
ig_followers • ig_verify • insta_followers • linkedin
mediafire • microsoft • netflix • paypal • pinterest
playstation • protonmail • quora • reddit • roblox
snapchat • spotify • steam • tiktok • twitch
twitter • xbox • yahoo

✨ New Templates Added

Template	Status
epicgames	✅ Added
icloud	✅ Added
onlyfans	✅ Added
patreon	✅ Added
riotgames	✅ Added
zoom	✅ Added

🗑️ Deprecated Templates

Removed due to low usage:

devianart • origin • vk • vk-poll • wordpress • yandex

---

Credits

NullPhish is based on Zphisher by htr-tech (Tahmid Rayat), licensed under GPL-3.0. All original contributors of Zphisher are acknowledged below.

---

Find Me On