Audience
Companies, red teams, security service providers
About Phishing Club
Phishing Club is an open source phishing simulation and red team phishing framework for authorized security testing. Self host it on your own server via a one line installer or Docker.
Plan, launch, and measure realistic campaigns from a single Go binary with an embedded web UI, HTTP/HTTPS phishing servers, and a REST API.
Features: multi stage phishing flows, flexible scheduling, multiple domains with automatic TLS, SMTP or custom API delivery with OAuth, recipient groups with CSV import and SCIM, PDF campaign reports, analytics, multi tenancy, MFA and
SSO (Entra ID, OIDC), webhooks, and in app updates.
Red team and AiTM: reverse proxy phishing to capture sessions, remote browser phishing, DOM and URL rewriting, dynamic obfuscation, JA4 and geo IP filtering, and device code phishing.





