Phishing kits are generally sold on underground forums and can be tricky (at least ethically!) for defenders to acquire. But when you're tackling a phishing campaign, having a copy of the threat actor's phishing kit is immensely useful.
This is a companion discussion topic for the original entry at https://phish.report/blog/harvesting-phishing-kits