Download

Woo hoo! I like downloads!

Ready to find out who your weakest link is?

Jump right into the phishing pool then and download spt today. the spt project uses github to host our code repository. Be sure to view the requirements page though to make sure you’ve got everything you need on your server.

On this page

Core – current version

Current stable release is v 0.60 (Flying Fish)

Description Date Version Notes Download
sptoolkit v0.60 3/23/2012 0.60
  • Check out the full details on the “Change Log” tab.
  • Email sending process when starting campaign completely rewritten.
  • Campaign statistics displayed in easy to use charts with filters.
  • Thirteen built-in templates, twelve allowing for quick start campaigns.
  • Eight built-in education modules.
  • Quick Start content helps you get educating as quickly as possible.
  • UI look has been updated with color icons throughout.
  • Many other improvements and new features.
  • The upgrade package will upgrade version 0.50 to version 0.60.  Extract and overwrite existing files in your spt installation.  Be sure to set permissions again afterwards!
 ZIP files:

TAR.GZ files:
spt source code n/a n/a
  • The spt source code.
  • We can’t guarantee that the source code will work correctly, completely or be stable at any point in time as we’re constantly changing it…download and use it with caution. Only full release versions have been fully verified to function correctly.
 github *

* If you want to see what’s going on with the individual commits, check out the commit log on github.

Core – previous versions

Previous versions are not supported by the spt project.

Description Date Version Notes Download
sptoolkit v0.5 2/17/2012 0.5
  • Check out the full details on the “Change Log” tab.
  • Many improvements and new features.
  • Campaigns and targets much improved.
  • Editor now included as core module.
  • The upgrade package will upgrade version 0.42 to version 0.5. See readme.txt in the upgrade package.

Modules – current versions

After downloading a module, please ensure you remove any version number information from the file name before attempting to install it in the spt dashboard.

Module Image Version Author Notes Download

Modules – previous versions

Previous versions are not supported by the spt project.

After downloading a module, please ensure you remove any version number information from the file name before attempting to install it in the spt dashboard.

Module Image Version Author Notes Download
File manager 0.5
  • Based on the GPL v2 open source webadmin.php script.
  • Perform many functions on files: edit, delete, copy, move, etc.
  • This version works only with spt version 0.50 only.
  • DOES NOT support administrator security check, DO NOT use if your spt install has non-admin users.
  • Original source uses deprecated ‘ereg’ RegEx functionality, may generate non-impacting errors on certain actions / systems.
 ZIP (13 kB)

The spt project has released the spt code under version 3 of the GNU General Public License. All modules submitted to the spt project from the community are also released under the same license. The spt project has taken reasonable and prudent steps to ensure that all credits due are given for all community contributed modules, and that the source of the module (if created by a party other than the contributor) was licensed under a similar licensing method.

The spt project shall take no responsibility for any copyright or intellectual property violations resulting from any community contributed module. Please contact us with any questions or concerns.

External links to contributor’s web sites on this page are provided strictly for your convenience. Their appearance here does not constitute any endorsement of their quality, suitability, safety or legality by the spt project.

Templates – current versions

The OWA 2010 clone template is now installed by default in spt version 0.60 and higher.

Template Image Version Author Notes Download
spt default templates  n/a 0.60 The spt project (3/23/2012) This bundle includes all thirteen default templates installed with spt version 0.60. Use this bundle to get any of these templates back if you have previously deleted them from your spt installation. ZIP (157 kB)

Templates – previous versions

Previous versions are not supported by the spt project.

Template Image Version Author Notes Download
Outlook Web App 2010 clone 2.0 The spt project (2/11/2012)
  • A very simple manual clone copy of the Outlook Web App 2010 login page.
  • This was the first template developed to show how spt could be used before the super awesome site scraper feature was introduced in version 0.1.
  • This version works with spt version 0.50 only.
 ZIP (39 kB)

The spt project has released the spt code under version 3 of the GNU General Public License. All templates submitted to the spt project from the community are also released under the same license. The spt project has taken reasonable and prudent steps to ensure that all credits due are given for all community contributed templates, and that the source of the template (if created by a party other than the contributor) was licensed under a similar licensing method.

The spt project shall take no responsibility for any copyright or intellectual property violations resulting from any community contributed template. Please contact us with any questions or concerns.

External links to contributor’s web sites on this page are provided strictly for your convenience. Their appearance here does not constitute any endorsement of their quality, suitability, safety or legality by the spt project.

Education Packages

Package Image Version Author Notes Download
spt default education packages  n/a 0.60 The spt project (3/23/2012) This bundle includes all eight default education packages installed with spt version 0.60. Use this bundle to get any of these education packages back if you have previously deleted them from your spt installation. ZIP (266 kB)
German (DE) education package 1.0 Hubert Feyrer (1/21/2012) German language translation of the first education package included with the spt. ZIP (8 kB)

The spt project has released the spt code under version 3 of the GNU General Public License. All education packages submitted to the spt project from the community are also released under the same license. The spt project has taken reasonable and prudent steps to ensure that all credits due are given for all community contributed education packages, and that the source of the education package (if created by a party other than the contributor) was licensed under a similar licensing method.

The spt project shall take no responsibility for any copyright or intellectual property violations resulting from any community contributed education package. Please contact us with any questions or concerns.

External links to contributor’s web sites on this page are provided strictly for your convenience. Their appearance here does not constitute any endorsement of their quality, suitability, safety or legality by the spt project.

Development Tools – current version

Tool Image Version Author Notes Download
Module development kit 0.60 The spt project (3/23/2012)
  • A starting set of files to use to create your own modules for the spt.
  • Contact us to get your module included for download on the spt site.
  • This development toolkit is designed to work with spt version 0.60 and higher.
 ZIP (7 kB)

Development Tools – previous versions

Previous versions are not supported by the spt project.

Tool Image Version Author Notes Download
Module development kit 0.5 (final) The spt project (2/11/2012)
  • A starting set of files to use to create your own modules for the spt.
  • Contact us to get your module included for download on the spt site.
  • This development toolkit is designed to work with spt version 0.5 only.
  • Previous 0.5 versions of this development kit did not reflect the final spt version 0.5 code base.
 ZIP (6 kB)

Change log and version release history

Version 0.7, code name Ghost Fish. Tentatively scheduled for release in June – August 2012. Tentative changes include the following:

  • Extensions management system in the dashboard, install or upgrade extensions within the dashboard
  • Improvements in the editing functionality.
  • Improvements in authentication and session management security.
  • Improvements in metric management.
  • Tracking beacons to let you know when an email has been viewed, even if the target never clicks the link.
  • Template analytics and quality grading.
  • Custom error pages.

Version 0.6, code name Flying Fish. Released March 23, 2012.

  • Email sending process when starting campaign completely rewritten.
  • Sendmail no longer used for sending emails, all email functions are handled by the SwiftMailer library.
  • Campaign statistics displayed in easy to use charts with filters powered by the High Charts library.
  • Thirteen built-in templates, twelve allowing for quick start campaigns. A quick start template just requires targets to exist and simulates an email where all you need is a link click (e.g. drive-by malware downloaders).
  • Eight built-in education modules, including four that do not require Internet access. More education options for your campaigns.
  • Quick Start content helps you get educating as quickly as possible.
  • UI look has been completely updated with color icons throughout for a modern, standardized, look and feel.
  • Improvements made to the module upload and design process for better install and removal results.
  • Logic to prevent duplicate target email addresses in a single target group.
  • New Admins – Test target group created that allows immediate testing of campaigns against the spt administrators (new v 0.60 installations only).
  • Dashboard module block layout reorganized to improve usability and get the information you need to you as quickly as possible.
  • Twitter feed for spt in the dashboard.
  • Entire spt codebase (not including SwiftMailer and High Charts libraries) has been “beautified” to be consistent and use the One True Brace Style (1TBS) as much as possible.
  • Many bug fixes and tweaks to improve usability.

Lines of code for version 0.60:

File language Code lines Comment lines Blank lines
PHP # # #
CSS # # #
HTML # # #
Javascript # # #
Total – # # # #
Percentage % % %

Version 0.5, code name Electric Catfish. Released February 17, 2012.

  • Improved installation routine, with environmental checks for the most common installation problems.
  • Improved campaign metrics and reporting, including export to CSV functionality.
  • The editor module is now a core spt module and is installed with the spt.
  • Improved target management including flexible support for an unlimited amount of custom target attributes.
  • Target template download replaced with target export (and then import via Add many function).
  • Improved template scraping process including options to personalize emails with target first and last name, and basic HTML support in the email message body.
  • The entire spt source code has been cleaned and consolidated to eliminate tons of errors of duplicated code.
  • Helpful links in the sidebar now get you straight to the sptoolkit.com site for documentation and support.
  • Usability improvements in navigation within the dashboard.

Lines of code for version 0.5:

File language Code lines Comment lines Blank lines
PHP 5,661 2,316 977
CSS 741 231 109
HTML 615 50 121
Javascript 15 25 3
Total – 10,864 7,032 2,622 1,210
Percentage 64.73% 24.13% 11.14%

Version 0.42, code name Dogfish. Released January 21, 2012.

  • Many bug fixes and improvements in the Campaign, Education, Targets and Templates modules.
  • Fixes issue with default education video not being available.
  • See commit log for full code changes.
  • New installs should download the full package.
  • The upgrade package will upgrade 0.40 or 0.41 to 0.42. See readme.txt in the upgrade package.

Lines of code for version 0.42:

File language Code lines Comment lines Blank lines
PHP 5,014 2,140 896
CSS 673 231 98
HTML 615 50 121
Total – 9,838 6,302 2,421 1,115
Percentage 64.06% 24.61% 11.33%

Version 0.41, code name Dartfish. Released January 17, 2012.

  • Sanity checking in site scraper. We missed some sanity checking in the site scraper function where the email.php was created. Thanks to Steve M. for bringing this issue to our attention.

Lines of code for version 0.41:

File language Code lines Comment lines Blank lines
PHP 5,020 2,141 897
CSS 673 231 98
HTML 641 53 124
Total – 9,878 6,334 2,425 1,119
Percentage 64.12% 24.55% 11.33%

Version 0.4, code name Dragonfish. Released January 8, 2012.

  • Response analytics. Data about the browser and computer used by the target, check it out in the campaign responses details.
  • Geo-location information about targets based on the IP address captured when the campaign link was clicked.
  • Education module. Educate targets immediately after they click the link (e.g., drive-by malware download) or after they submit the form (e.g., old-school username and password phishing).

Lines of code for version 0.4:

File language Code lines Comment lines Blank lines
PHP 5,013 2,140 895
CSS 673 231 98
HTML 641 53 124
Total – 9,868 6,327 2,424 1,117
Percentage 64.12% 24.56% 11.32%

Version 0.3, code name Catfish. Released December 2, 2011.

  • The editor. Now that you are scraping sites you can edit template components directly within spt. The editor is also the first add-on module made available for the spt.
  • Custom target attributes. Reporting is on the horizon but first the groundwork must be laid. Add custom attributes to your targets for reporting and target analytics.

Lines of code for version 0.3:

File language Code lines Comment lines Blank lines
PHP 4,561 1,957 808
CSS 517 161 76
HTML 589 25 117
Total – 8,811 5,667 2,143 1,001
Percentage 64.32% 24.32% 11.36%

Version 0.2 was skipped.

Version 0.1, code name Barracuda. Released November 13, 2011.

  • Template scraping technology. Allows you to scrape external sites and turn them directly into a template.
  • Help has arrived. A tooltip system that allows for quick, targeted help information at every turn. Just look for the lightbulb!

Lines of code for version 0.1:

File language Code lines Comment lines Blank lines
PHP 4,270 1,895 759
CSS 495 161 76
HTML 589 25 117
Total – 8,376 5,354 2,071 951
Percentage 63.92% 24.73% 11.35%

Version 0.0, code name Albacore. Released October 24, 2011.

  • Initial version of spt released to the public. Features support for basic phishing and results analysis with one template available for usage.
  • Basic Framework and concept. Meant as a platform for growth.

Lines of code for version 0.0:

File language Code lines Comment lines Blank lines
PHP 3,988 1,748 685
CSS 435 161 64
HTML 547 3 109
Total – 7,740 4,970 1,912 858
Percentage 64.21% 24.70% 11.09%

What else will it do?

We might just add the features listed below in the future, though they are not currently scheduled for any specific release version. If you have an idea for a killer feature, why not let us know via the Contact page?

  • Integration with other security toolsets
  • Support for SSL including secure cookies

This thing is licensed? Oh great, how much is this going to cost me now?

Ah, yes, spt is indeed licensed. The great part is that it is licensed under version 3 of the GNU General Public License. Awesome! spt is free, as in free beer, also as in freedom. Or, free like free shotgun shells and health packs…you know, for the zombie apocalypse.

Use the spt as you wish, modify it, change it…just don’t steal it or try to claim it’s yours or your idea. That’s about it. Free. Cool.

Want to read the full text of the version 3 of the GNU General Public License? Don’t let us get in your way. You can read it here.

gplv3

The spt project has released the spt code under version 3 of the GNU General Public License. All modules, templates and education packages submitted to the spt project from the community are also released under the same license. The spt project has taken reasonable and prudent steps to ensure that all credits due are given for all community contributed items, and that the source of the item (if created by a party other than the contributor) was licensed under a similar licensing method.

The spt project shall take no responsibility for any copyright or intellectual property violations resulting from any community contributed item. Please contact us with any questions or concerns.

External links to contributor’s web sites on this page are provided strictly for your convenience. Their appearance here does not constitute any endorsement of their quality, suitability, safety or legality by the spt project.