One of the best tools out there for phishing attacks is BeEF. BeEF uses weaknesses that are found in web browsers for client-side attacks. These attacks hook web browsers and use them as beachheads in order to attack the host directly. It is a very easy attack, as it is often easy to trick users. It shows the importance of making sure your browser is patched and up to date.
BeEF can be placed in many categories, but I consider it an exploitation tool and that is how I plan to use it in my lab. BeEF is a very popular tool for penetration testers as it adds yet another vector for us to test against; it looks beyond perimeter security, and it doesn't require us to change any security or settings against the endpoint targets. It is also a very good tool to test your users with various social engineering tasks by seeing who clicks on which fake links.
BeEF is primarily driven via the browser, so running beef-xss from the CLI will start BeEF, but the rest...