working on phishing

2025-07-09 11:30:04 -04:00
parent 36de65ba60
commit 8673559470
3 changed files with 41 additions and 1 deletions
@@ -0,0 +1,15 @@
+class OPSECGoPhish:
+    def __init__(self):
+        self.use_gophish_for = ['email_sending', 'template_management']
+        self.use_custom_for = ['tracking', 'credential_capture', 'reporting']
+    
+    def send_campaign(self, targets, template):
+        # Use GoPhish SMTP capabilities
+        campaign = self.create_minimal_campaign(targets, template)
+        
+        # But replace tracking with custom implementation
+        campaign.tracking_url = self.custom_tracker.generate_url()
+        campaign.landing_page = self.custom_landing.generate()
+        
+        # Store results in encrypted, distributed storage
+        self.secure_storage.initialize(campaign.id)
@@ -0,0 +1,22 @@
+# modules/phishing/gophish/templates/gophish-opsec.yaotl.j2
+gophish:
+  admin_server:
+    # Only listen on localhost
+    listen_url: "127.0.0.1:{{ gophish_admin_port }}"
+    # Use client certificates
+    use_tls: true
+    tls_cert: "/opt/gophish/admin-cert.pem"
+    tls_key: "/opt/gophish/admin-key.pem"
+    client_ca: "/opt/gophish/client-ca.pem"
+  
+  phish_server:
+    # Behind nginx, no direct exposure
+    listen_url: "127.0.0.1:{{ gophish_phish_port }}"
+    
+  # Custom modifications
+  modifications:
+    - remove_default_headers: true
+    - randomize_endpoints: true
+    - custom_tracking_pixel: true
+    - encrypted_storage: true
+    - auto_purge_days: 7