Initial public portfolio release

Sanitized version of red team infrastructure automation platform. Operational content (implant pipelines, lures, credential capture) replaced with documented stubs. Architecture and infrastructure automation code intact.
2026-06-23 16:12:14 -04:00
commit 0799bfbae8
239 changed files with 40012 additions and 0 deletions
@@ -0,0 +1,42 @@
+{
+    "admin_server": {
+        "listen_url": "127.0.0.1:{{ gophish_admin_port }}",
+        "use_tls": true,
+        "cert_path": "/etc/letsencrypt/live/{{ phishing_domain }}/fullchain.pem",
+        "key_path": "/etc/letsencrypt/live/{{ phishing_domain }}/privkey.pem",
+        "trusted_origins": []
+    },
+    "phish_server": {
+        "listen_url": "0.0.0.0:{{ gophish_phish_port | default(8081) }}",
+        "use_tls": false,
+        "cert_path": "",
+        "key_path": ""
+    },
+    "db_name": "sqlite3",
+    "db_path": "gophish.db",
+    "migrations_prefix": "db/db_",
+    "contact_address": "{{ smtp_from_address | default('noreply@' + domain) }}",
+    "logging": {
+        "filename": "{{ '/dev/null' if zero_logs | default(true) else 'gophish.log' }}",
+        "level": "{{ 'error' if zero_logs | default(true) else 'info' }}"
+    },
+    "webhook": {
+        "enabled": {{ enable_webhooks | default(false) | lower }},
+        "url": "{{ webhook_url | default('') }}",
+        "secret": "{{ webhook_secret | default('') }}"
+    },
+    "email": {
+        "smtp": {
+            "host": "{{ mta_front_ip | default('127.0.0.1') }}",
+            "port": 25,
+            "use_auth": true,
+            "username": "{{ smtp_auth_user }}",
+            "password": "{{ smtp_auth_pass }}",
+            "from_address": "{{ smtp_from_address | default('noreply@' + domain) }}",
+            "ignore_cert_errors": true
+        },
+        "imap": {
+            "enabled": false
+        }
+    }
+}
@@ -0,0 +1,23 @@
+{
+        "admin_server": {
+                "listen_url": "0.0.0.0:{{ gophish_admin_port }}",
+                "use_tls": true,
+                "cert_path": "/etc/letsencrypt/live/{{ domain }}/fullchain.pem",
+                "key_path": "/etc/letsencrypt/live/{{ domain }}/privkey.pem",
+                "trusted_origins": []
+        },
+        "phish_server": {
+                "listen_url": "0.0.0.0:8081",
+                "use_tls": false,
+                "cert_path": "/etc/letsencrypt/live/{{ domain }}/fullchain.pem",
+                "key_path": "/etc/letsencrypt/live/{{ domain }}/privkey.pem"
+        },
+        "db_name": "sqlite3",
+        "db_path": "gophish.db",
+        "migrations_prefix": "db/db_",
+        "contact_address": "",
+        "logging": {
+                "filename": "",
+                "level": ""
+        }
+}
@@ -0,0 +1,22 @@
+# modules/phishing/gophish/templates/gophish-opsec.yaotl.j2
+gophish:
+  admin_server:
+    # Only listen on localhost
+    listen_url: "127.0.0.1:{{ gophish_admin_port }}"
+    # Use client certificates
+    use_tls: true
+    tls_cert: "/opt/gophish/admin-cert.pem"
+    tls_key: "/opt/gophish/admin-key.pem"
+    client_ca: "/opt/gophish/client-ca.pem"
+  
+  phish_server:
+    # Behind nginx, no direct exposure
+    listen_url: "127.0.0.1:{{ gophish_phish_port }}"
+    
+  # Custom modifications
+  modifications:
+    - remove_default_headers: true
+    - randomize_endpoints: true
+    - custom_tracking_pixel: true
+    - encrypted_storage: true
+    - auto_purge_days: 7