ShadowLink
ShadowLink is a powerful, lightweight, and terminal-based URL masking tool designed for ethical use in cybersecurity demonstrations, phishing awareness training, and red teaming exercises.
It allows you to generate deceptive but legitimate-looking URLs by masking original links with custom domains and keywords—perfect for simulating real-world phishing behavior in a controlled environment.
Features
- Mask any valid URL with a custom domain and keyword.
- Uses multiple shorteners (TinyURL, da.gd, clck.ru, osdb.link).
- Built-in validation for URLs, domains, and keywords.
- Animated loading spinner with polished CLI output.
- Works flawlessly on Linux terminals.
- Clean and single-file implementation for easy use.
Installation
We recommend using a Python virtual environment (venv) to isolate dependencies.
Step-by-step Setup
# 1. Clone the repo
git clone https://github.com/petherl/shadowlink.git
cd shadowlink
# 2. Create and activate a virtual environment
python3 -m venv venv
source venv/bin/activate
# 3. Install dependencies
pip3 install -r requirements.txt
# 4. Run the tool
python3 shadowlink.py
Install via PyPI (Recommended)
If you prefer to install and use ShadowLink globally:
pip3 install shadowlink
Then run it from anywhere in your terminal:
shadowlink
Or using the Python module syntax:
python -m shadowlink
💡 This is the easiest way to use ShadowLink if you don’t want to clone the repository manually.
Usage
Simply follow the on-screen prompts:
➤ Enter the original URL (e.g. https://example.com)
➤ Enter a custom domain (e.g. x.com)
➤ Enter a phishing keyword (e.g. login, signup, verify)
ShadowLink will then generate multiple masked URLs using various shortening services.
Requirements
- Python 3.10+
- Linux or WSL terminal
- Internet connection (for link shortening)
[!CAUTION]
This tool is developed strictly for educational and ethical purposes such as:
- Cybersecurity training
- Social engineering awareness
- Red team operations
Any misuse of this tool for malicious purposes is strongly discouraged and illegal. The author is not responsible for any misuse or damage caused.
Author
License
This project is released under the MIT License.
Metadata
Release files for shadowlink 0.0.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| shadowlink-0.0.1.tar.gz | 6.9 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| shadowlink-0.0.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 13.8 kB
Release files / shadowlink-0.0.1.tar.gz
| Download URL | shadowlink-0.0.1.tar.gz |
|---|---|
| Size | 6.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
7ce2bf6389e04c7a9638f83a02805d997ad48d85ecca693435fa019d47ac3985
|
|
BLAKE2b-256 checksum How to use checksums |
c80c9bd349f674c1aac7d617caf562b887e7569e38b4b4639ad3a8e5a830361a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.12.9
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jun 25, 2025.
Transparency logRelease files / shadowlink-0.0.1-py3-none-any.whl
| Download URL | shadowlink-0.0.1-py3-none-any.whl |
|---|---|
| Size | 6.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d027f9078576961c4b18b5dfc33bd15a36f5fe637c95aa8cbc8b42e1b270fd42
|
|
BLAKE2b-256 checksum How to use checksums |
f1472df390120898a1479818230eae52c87db77019cddbf9d683ee25472b87fc
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.12.9
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jun 25, 2025.
Transparency log