The goal was to create the most comprehensive course for researchers & professionals wanting to learn how complex phishing & smishing attacks are deployed in today's environment. There are no comprehensive tutorials on how to use this tool.
For those concerned about the ethics of hacking tutorials as well as tools such as EvilGoPhish it's not the learning of the skill that's unethical, but the choices made in applying it.
It's like using a hammer – it can be used to build something or to break something. The tool isn't "bad" per say, it’s how you use it that matters. Ethical hacking is using that "hammer" to make things safer, not to cause damage.
Ethical hacking, for example, is a legitimate and necessary practice in improving cybersecurity.
In this case, understanding the tactics that adversaries use in advanced phishing and smishing attacks is crucial for professionals seeking to enhance their offensive capabilities.
Cybersecurity Course
EvilGoPhish Email Lure Template #1 - G-Suite Drive (.HTML)
EvilGoPhish Email Lure Template #2 - Linkedin (.HTML)
EvilGoPhish Email Lure Template #3 - Microsoft Azure Upgrade (.HTML)
Welcome to the Course & Thank You!
Course Welcome Survey
(!) Course Ethics and Legal Guidelines
How to Filter & Select a Domain Like a Pro
Domain Selection: Criteria Checklist and Filtering with Palo Alto Networks and Cisco Talos
Domain Alternatives: Anonymous Offshore Hosting 1984.Hosting, Njalla, and OrangeWebsite
Important: Advanced Domain Selection and Filtering Lessons A/B Preview
Advanced Domain Filtering - Part A: Strategies for Selection, Filtering, and Aged Domains
Advanced Domain Filtering - Part B: Filtering Domain Authority, Backlinks, Keywords, and Site Audits for EvilGoPhish
Anonymous Offshore Domain Registration & Server Providers (Top 3 Ranked)
Course Agenda & Learning Structure
Important Notice to All Students! Course Guidelines
EvilGoPhish Mastery Course - Introduction
Why This Course Was Created & Course Objectives and Goals
Important Notice: Course Guidelines
Important Notice: Ethical Conduct and Legal Compliance
Introduction to Red Teaming & Advanced Phishing
Red Teaming and Red Team Engagements Explained
Phishing Context & Techniques: Future Implications for Cybersecurity
Case Study: Advanced Social-Engineering vs. Chase Bank
Course Infrastructure Tool Stack
Course Infrastructure Tool Stack (Direct)
Modern Email Authentication Explained: A Detailed Guide to SPF, DKIM, DMARC with Namecheap DNS Demonstration
Common Questions
This advanced course delves into methods to reduce the chances of detection, such as domain validation, optimizing email and SMS templates, and using Cloudflare Turnstile for advanced bot detection and evasion. Additionally, we focus on removing indicators of compromise (IOCs) in phishing tools like EvilGoPhish, improving email delivery and campaign effectiveness.
This course was created is to give everyone access to this information in a non-expensive & understandable way. I was tired of seeing these the majority of companies charging $500+ for a shitty training, teaching it in a way that's not clear & only advanced users can understand. The point is to give value to students around the world who may not have the means or resources to access said information.
Yes, students will have lifetime access to the course material, including any future updates.
Smishing campaigns present a different set of challenges compared to email-based phishing, especially regarding carrier spam filters. This course addresses how to integrate EvilGoPhish’s smishing functionality to conduct large-scale, personalized smishing campaigns while mitigating carrier-level blocks. We go over essential SMS template creation strategies, as well as using anonymous SMS gateways and custom domains to ensure message delivery. You'll also learn how to troubleshoot and prevent common smishing pitfalls using tools like Klayviyo and other third-party APIs.
Yes, this course is aimed at intermediate to advanced professionals who already have a foundational understanding of phishing tools, red teaming, and penetration testing. However, the course does start with a review of the fundamentals and builds up to advanced techniques, ensuring that students with some prior knowledge can follow along and progress through the material.
Yes. Most students prefer to pay with cryptocurrency. All that is required is an email address to send the course to [email protected] & Cee or SH will reach out to you. We understand that USD/EU exchange rates may be high for students in other countries. We use the Coinbase Commerce API for our invoices & all of our transactions.
The course covers phishing techniques like credential harvesting, session hijacking, transparent reverse proxying, multi-stage engagement flows, social engineering frameworks. Scenarios are modeled after real-world tests. Everything is updated to its current version as well.
It's imperative to adhere to ethical conduct; any misuse absolves all liabilities for resulting damages. Seriously. This a potent educational resource for Cybersecurity researchers, students & professionals looking to master modern advanced phishing tactics. Do not use this information for bad. Seriously.
Our phishlets can be found on https://github.com/simplerhacking/Evilginx3-Phishlets
Learn how configure SPF, DMARC, DKIM & MX for Evilginx & GoPhish
This is important for running engagements over long periods of time without worrying.
This is the first course to dive into actually configuring, deploying & defending Smishing.
Hear what others say about the course!
“The course not only teaches you how to execute sophisticated phishing engagements with the latest pro version of Evil gophish 3.0 for your teams but also equips you with the proper knowledge and tricks to stay ahead. Its hard to explain but there some subtle parts of hacking that very few courses can accurately communicate to people with years of experience like myself.”
Rencora Security - course review via medium.com/@rencora
“If you're a cybersecurity student or on a tight budget, consider the Evilginx Pro Masterclass from Simpler Hacking to learn all about Evilginx. Took the course yesterday, and it has all the content to get you started on your engagements.”
Jan Bakker - via www.JanBakker.tech
“Thanks to @mrgretzky and @simplerhacking for making 2 of the best Phishing courses of the year!!! ”
Brigade SH
This is the most comprehensive course on advanced phishing available in 2025.
