Raikia / FiercePhish

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
https://github.com/Raikia/FiercePhish/wiki
GNU General Public License v3.0
1.32k stars 250 forks source link

API call to log UIDs #74

Open digininja opened 6 years ago

digininja commented 6 years ago

While thinking about UIDs I thought of this that would help. You create an API that takes the UID and logs that it has been accessed, an additional field that says where would also be useful. The use case is:

user clicks link and lands on phishing home page - log ($uid, "homepage")
user enters username and password - log ($uid, "logged in")

You can then track how far certain users have gone through the phishing process. A report to say:

The API could take hits in a number of ways, server to server through a curl command or from a browser in an image or JavaScript XML_HTTP_Request.