WINTER SALE EXTENDED: 50% OFF EVERYTHING
All courses are currently 50% off their original price. No code needed. Lifetime access included.
Why this course was created?
The goal was to create the most comprehensive course for researchers & professionals wanting to learn how complex phishing & smishing attacks are deployed in today's environment.
There are no comprehensive tutorials on how to use this tool in 2025.
Current tutorials are outdated, basic and incomplete. For example, this is the only training that dives into the crucial latest cloudflare bot protection integration, how to configure SMTP API settings, and how to deploy live Evilfeed notifications.
Why would you teach people something like this?
For those concerned about the ethics of hacking tutorials as well as tools such as EvilGoPhish it's not the learning of the skill that's unethical, but the choices made in applying it.
It's like using a hammer – it can be used to build something or to break something. The tool isn't "bad" per say, it’s how you use it that matters. Ethical hacking is using that "hammer" to make things safer, not to cause damage.
Ethical hacking, for example, is a legitimate and necessary practice in improving cybersecurity.
In this case, understanding the tactics that adversaries use in advanced phishing and smishing attacks is crucial for professionals seeking to enhance their offensive capabilities.
Course Curriculum (All Lessons)
Cybersecurity Course
-
-
EvilGoPhish Email Lure Template #1 - G-Suite Drive (.HTML)
-
EvilGoPhish Email Lure Template #2 - Linkedin (.HTML)
-
EvilGoPhish Email Lure Template #3 - Microsoft Azure Upgrade (.HTML)
-
-
-
Welcome to the Course & Thank You!
-
Course Welcome Survey
-
(!) Course Ethics and Legal Guidelines
-
-
-
How to Filter & Select a Domain Like a Pro
-
Domain Selection: Criteria Checklist and Filtering with Palo Alto Networks and Cisco Talos
-
Domain Alternatives: Anonymous Offshore Hosting 1984.Hosting, Njalla, and OrangeWebsite
-
Important: Advanced Domain Selection and Filtering Lessons A/B Preview
-
Advanced Domain Filtering - Part A: Strategies for Selection, Filtering, and Aged Domains
-
Advanced Domain Filtering - Part B: Filtering Domain Authority, Backlinks, Keywords, and Site Audits for EvilGoPhish
-
Anonymous Offshore Domain Registration & Server Providers (Top 3 Ranked)
-
-
-
Course Agenda & Learning Structure
-
Important Notice to All Students! Course Guidelines
-
EvilGoPhish Mastery Course - Introduction
-
Why This Course Was Created & Course Objectives and Goals
-
-
-
Important Notice: Course Guidelines
-
Important Notice: Ethical Conduct and Legal Compliance
-
Introduction to Red Teaming & Advanced Phishing
-
Red Teaming and Red Team Engagements Explained
-
Phishing Context & Techniques: Future Implications for Cybersecurity
-
Case Study: Advanced Social-Engineering vs. Chase Bank
-
Course Infrastructure Tool Stack
-
Course Infrastructure Tool Stack (Direct)
-
-
-
Modern Email Authentication Explained: A Detailed Guide to SPF, DKIM, DMARC with Namecheap DNS Demonstration
-
EvilGoPhish Mastery (2025)
- $75.00
- 5 hours of video content
Frequently Asked Questions (FAQs)
Common Questions
-
Does this course help to avoid detection by anti-phishing filters like Google's Safe Browsing?
This advanced course delves into methods to reduce the chances of detection, such as domain validation, optimizing email and SMS templates, and using Cloudflare Turnstile for advanced bot detection and evasion. Additionally, we focus on removing indicators of compromise (IOCs) in phishing tools like EvilGoPhish, improving email delivery and campaign effectiveness.
-
Why should I choose this course over others for learning about Evilginx & cybersecurity?
This course was created is to give everyone access to this information in a non-expensive & understandable way. I was tired of seeing these the majority of companies charging $500+ for a shitty training, teaching it in a way that's not clear & only advanced users can understand. The point is to give value to students around the world who may not have the means or resources to access said information.
-
Can I access the course material after completion?
Yes, students will have lifetime access to the course material, including any future updates.
-
How can EvilGoPhish be used to conduct large-scale smishing campaigns while avoiding carrier blocking and spam filters?
Smishing campaigns present a different set of challenges compared to email-based phishing, especially regarding carrier spam filters. This course addresses how to integrate EvilGoPhish’s smishing functionality to conduct large-scale, personalized smishing campaigns while mitigating carrier-level blocks. We go over essential SMS template creation strategies, as well as using anonymous SMS gateways and custom domains to ensure message delivery. You'll also learn how to troubleshoot and prevent common smishing pitfalls using tools like Klayviyo and other third-party APIs.
-
Do I need prior experience with phishing tools to take this course?
Yes, this course is aimed at intermediate to advanced professionals who already have a foundational understanding of phishing tools, red teaming, and penetration testing. However, the course does start with a review of the fundamentals and builds up to advanced techniques, ensuring that students with some prior knowledge can follow along and progress through the material.
-
Do you accept cryptocurrency payments?
Yes. Most students prefer to pay with cryptocurrency. All that is required is an email address to send the course to [email protected] & Cee or SH will reach out to you. We understand that USD/EU exchange rates may be high for students in other countries. We use the Coinbase Commerce API for our invoices & all of our transactions.
-
What specific phishing techniques and scenarios are covered in the course?
The course covers phishing techniques like credential harvesting, session hijacking, transparent reverse proxying, multi-stage engagement flows, social engineering frameworks. Scenarios are modeled after real-world tests. Everything is updated to its current version as well.
-
What if I ignore the ethical guidelines discussed in the course?
It's imperative to adhere to ethical conduct; any misuse absolves all liabilities for resulting damages. Seriously. This a potent educational resource for Cybersecurity researchers, students & professionals looking to master modern advanced phishing tactics. Do not use this information for bad. Seriously.
-
Where can I find Phishlets?
Our phishlets can be found on https://github.com/simplerhacking/Evilginx3-Phishlets
EvilGoPhish Mastery Content Screen Preview
Master Reverse-Proxy Phishing & MFA Bypass Techniques:
Gain in-depth knowledge of advanced MiTM attacks and Multi-Factor Authentication bypass, including the latest strategies and methodologies used by top-tier red teams and penetration testers.
Advanced Domain Filtering & Validation:
Learn how configure SPF, DMARC, DKIM & MX for Evilginx & GoPhish
Learn advanced domain selection and filtering techniques, utilizing tools like Palo Alto Networks and Cisco Talos, and explore anonymous offshore hosting solutions.
Step by Step Infrastructure Setup
Configure VPS servers, fix network issues, install EvilGoPhish Pro and set up domain records correctly. Leverage automation tools like Claude.AI & GPT-4 for streamlining setup processes.
Cloud Architecture Deployment
Set up and configure the EvilGoPhish 3.0 Toolkit live. Understand network security basics and master the technical infrastructure required for effective campaigns.
Email Authentication & Domain Validation:
Learn comprehensive email authentication, how to implement SPF, DKIM, and DMARC protocols with detailed guides and practical demonstrations, ensuring emails are authenticated and delivered successfully.
Combat Google's Advanced Bot Detection Algorithms using Cloudflare Turnstile
Learn how to Integrate advanced bot detection mechanisms like Turnstile to protect your infrastructure and customize HTML templates for improved campaign stealth and effectiveness.
Indicators of Compromise (IOCs) and OPSEC
Understand and remove IOCs from your phishing tools to enhance email delivery rates, and adopt best practices for operational security during campaigns. (No courses teach this!)
OSINT Techniques and Pre-Campaign Preparation
Before deploying campaigns, learn how we utilizes OSINT tools for gathering intelligence, identifying targets, and preparing comprehensive pre-campaign strategies.
TMUX Utilization for Campaign Persistence
This is important for running engagements over long periods of time without worrying.
Master TMUX (Terminal Multiplexer) for maintaining session persistence during long-term campaigns, ensuring seamless operation and monitoring.
Learn SMS Phishing (Smishing) Techniques for iOS & Android Users:
This is the first course to dive into actually configuring, deploying & defending Smishing.
This is the first course to dive into deploying modern smishing attacks from start to finish. Set up and execute smishing campaigns, understand adversary TTPs, and create effective iOS templates to target mobile users.
Access to Comprehensive Archives, Toolkits, Custom Resources
Access a wealth of updated templates, resources, email scripts, and toolkits to support your campaigns and enhance your skillset.
Course Testimonials & Reviews
Hear what others say about the course!
“The course not only teaches you how to execute sophisticated phishing engagements with the latest pro version of Evil gophish 3.0 for your teams but also equips you with the proper knowledge and tricks to stay ahead. Its hard to explain but there some subtle parts of hacking that very few courses can accurately communicate to people with years of experience like myself.”
Rencora Security - course review via medium.com/@rencora
“If you're a cybersecurity student or on a tight budget, consider the Evilginx Pro Masterclass from Simpler Hacking to learn all about Evilginx. Took the course yesterday, and it has all the content to get you started on your engagements.”
Jan Bakker - via www.JanBakker.tech
“Thanks to @mrgretzky and @simplerhacking for making 2 of the best Phishing courses of the year!!! ”
Brigade SH
If you want to learn uncensored advanced phishing, this course is for you.
This is the most comprehensive course on advanced phishing available in 2025.
Trusted by our sponsors
