What do phishers use to scam us ?
Scamware. Offensive computing has put some online so that security testers can work with the same tools as the bad guys - but with other goals I hope. Even if it is not programmed for our services, a good security tester can work on it so that it could work for our services and than test it. (You should be under contract with the site you are testing)