# Conducting Spearphishing Simulation Campaign

Spearphishing simulation is a targeted social engineering attack vector used by red...

- Repository: https://github.com/AgentFlocks/flocks (504 stars)
- Category: Engineering
- License: Apache-2.0
- Last updated: 2026-10-30
- Runs scripts: yes, review before use

## Install

Claude Code: `npx skills add AgentFlocks/flocks --skill conducting-spearphishing-simulation-campaign -g -a claude-code -y`
Codex: `npx skills add AgentFlocks/flocks --skill conducting-spearphishing-simulation-campaign -g -a codex -y`
Cursor: `npx skills add AgentFlocks/flocks --skill conducting-spearphishing-simulation-campaign -g -a cursor -y`
Gemini CLI: `npx skills add AgentFlocks/flocks --skill conducting-spearphishing-simulation-campaign -g -a gemini-cli -y`

## Description

Spearphishing simulation is a targeted social engineering attack vector used by red teams to gain initial access. Unlike broad phishing campaigns, spearphishing uses OSINT-derived intelligence to craf

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Conducting Spearphishing Simulation Campaign


> **Legal Notice:** This skill is for authorized security testing and educational purposes only. Unauthorized use against systems you do not own or have written permission to test is illegal and may violate computer fraud laws.

## Overview

Spearphishing simulation is a targeted social engineering attack vector used by red teams to gain initial access. Unlike broad phishing campaigns, spearphishing uses OSINT-derived intelligence to craft highly personalized messages targeting specific individuals. This skill covers developing pretexts, building payloads, setting up email infrastructure, executing the campaign, and tracking results.


## When to Use

- When conducting security assessments that involve conducting spearphishing simulation campaign
- When following incident response procedures for related security events
- When performing scheduled security testing or auditing activities
- When validating security controls through hands-on testing

## Prerequisites

- Familiarity with red teaming concepts and tools
- Access to a test or lab environment for safe execution
- Python 3.8+ with required dependencies installed
- Appropriate authorization for any testing activities

## Objectives

- Develop convincing pretexts tailored to specific target personnel
- Create weaponized payloads that bypass email security controls
- Set up email delivery infrastructure with proper SPF/DKIM/DMARC configuration
- Execute phishing campaigns with real-time tracking and metrics
- Document results for engagement reporting and security awareness improvement

## MITRE ATT&CK Mapping

The rest: https://github.com/AgentFlocks/flocks/blob/HEAD/.flocks/flockshub/plugins/skills/Anthropic-Cybersecurity-Skills/conducting-spearphishing-simulation-campaign/SKILL.md