[Ramp33]

Hi
I've been reading about phishing and I'm interested in putting it into practice. I'd appreciate it if you could share some tips on:

•     Cloning websites without breaking the CSS/JS
  
•     Bypassing browsers that show "suspicious site" warnings
  
•     Hosting that doesn't take down sites within 24 hours
  
•     Making the URL look legitimate (homoglyphs, shorteners, low-risk TLDs)
  
•     Simulating two-factor authentication
  
•     Automatically redirecting to the real site after credentials are stolen
  

If you have examples or templates you use, I’d really appreciate it. I'm not looking for ready-made kits I'm interested in learning the process.

[xZyck]

I was making a Phishing template for Banco de Credito del Perú (BCP), to add it to the PyPhisher tool. I still need to improve certain parts of the code and add something else so that it saves the input, because it already saves the IP and geolocation of the Victim.