DuckIntel / Security Tools

Phishing Simulation Builder

Build phishing email templates for security awareness training. 13 templates, red flag analyzer, quiz generator. No actual email sending.

The Phishing Simulation Builder creates realistic phishing email templates for security awareness training programs. Choose from 13 pre-built templates covering the most common phishing scenarios: credential harvesting pages, business email compromise (BEC), invoice fraud, package delivery, HR policy updates, IT helpdesk impersonation, and more. The tool generates display-ready templates, not functional phishing infrastructure — it is a training and awareness tool only.

Security awareness training is most effective when employees see realistic examples of the attacks they are being trained to recognize. Generic phishing examples that obviously look fake do not prepare staff for the sophisticated, targeted spear-phishing emails that actually compromise organizations. The Phishing Simulation Builder generates templates that mimic the real characteristics of each attack type, so training exercises present genuine challenges.

Each generated template includes an automatic red flag analysis that identifies the manipulation techniques used in the email — urgency language, impersonation indicators, suspicious links, request for sensitive information — and maps them to MITRE ATT&CK technique T1566 (Phishing) and its sub-techniques. A built-in quiz generator creates awareness training questions based on the template for post-exercise review.

Features

13 pre-built phishing template types
Credential harvest, BEC, invoice fraud, HR, IT helpdesk scenarios
Automatic red flag analysis
MITRE ATT&CK technique mapping
Quiz generator for post-exercise training
Training use only — no email sending capability
Export templates for use in awareness programs

Part of DuckIntel.io — 59 free browser-based security tools for SOC analysts. No login. No tracking. 100% client-side.