conducting-spearphishing-simulation-campaign

This skill is a high-risk offensive security playbook for phishing, credential capture, and initial access. The capabilities align with its stated red-team purpose, so this is not deceptive malware, but it is dangerous by design and unsuitable for general agent deployment.

The code is a dual-use phishing-simulation utility rather than clear malware. It contains explicit credential-harvesting campaign themes and administrative GoPhish API functionality, so use should be restricted to authorized security testing. The most significant security weakness is disabled TLS verification, which can expose the API key and campaign data to interception. Command-line API-key exposure and unrestricted report-file output are additional risks. No direct credential theft, exfiltration, persistence, or destructive behavior is shown, and the fragment is syntactically invalid as provided.

This is an offensive spearphishing campaign utility, not a benign general-purpose email tool. It generates personalized social-engineering messages, embeds operator-selected phishing URLs, supports look-alike-domain and mail-infrastructure setup, and measures credential submissions. It does not itself show malware persistence or direct credential exfiltration, but its intended functionality materially enables phishing and credential harvesting. The fragment is also syntactically invalid as provided.

This content describes a high-risk spearphishing and malware-delivery workflow. It explicitly captures passwords, tracks victims, downloads and executes payloads, uses evasion techniques, and establishes C2 monitoring. No actual payload or active endpoint is supplied, but the operational instructions are directly suitable for credential theft and compromise. It should not be used against real users or systems without tightly controlled authorization, isolated infrastructure, synthetic credentials, and non-executing benign payloads.