Gophish 钓鱼测试

2021-09-26 [Pentest](钓鱼)

0x00 Gophish 使用

配置 Gophish 服务
配置发送邮箱
编写钓鱼邮件内容
编写钓鱼页面
添加目标邮箱
开始攻击

0x01 配置 Gophish 服务

在 https://github.com/gophish/gophish/releases 下载

然后编辑 config.json，之后直接 ./gophish 运行即可

{
    "admin_server": {
        "listen_url": "0.0.0.0:58001", // Gophish 管理页面
        "use_tls": true,
        "cert_path": "gophish.crt",
        "key_path": "gophish.key"
    },
    "phish_server": {
        "listen_url": "0.0.0.0:58002", // 钓鱼的 web 服务
        "use_tls": false,              // 不使用 tls，web 服务地址为 http://x.x.x.x:58002/
        "cert_path": "gophish.crt",
        "key_path": "gophish.key"
    },
    "db_name": "sqlite3",
    "db_path": "gophish.db",
    "migrations_prefix": "db/db_",
    "contact_address": "",
    "logging": {
        "filename": "",
        "level": ""
    }
}