chrismaddalena / Goreport

A Python script to collect campaign data from Gophish and generate a report
BSD 3-Clause "New" or "Revised" License
176 stars 49 forks source link

Enhancement request #17

Open CyberM070 opened 5 years ago

CyberM070 commented 5 years ago

First of all thanks for this wonderful tool. It really makes reporting a lot easier! The only thing that I'm missing here is that the position information isn't used in the tool. So for example, what % of position A opened the phishing mail and what % actually submitted data? This would be a nice addition to the tool as it is right now. Another great feature would be to automatically generate graphics in the Word template.

CyberM070 commented 5 years ago

Also the phone models are not represented in the output of the reports.

chrismaddalena commented 5 years ago

The position is an interesting idea. I'll look into adding something for tracking that. It wouldn't be too hard.

I'm not sure what you mean by "the phone models are not represented" in the reports. I do see Gophish will show you a phone icon and a label like "Apple iPhone" if the user agent maps back to an iOS browser but that's about it for phone models. The Goreport reports will show you "iOS 12.4" and "Mobile Safari" for OS and browser info.

CyberM070 commented 5 years ago

I'm looking forward to the added feature. I recently ran a campaign which showed specific Samsung models, so that's why I assumed that Gophish tracks the phone model. For iPhone it doesn't appear to work that way so far.

CyberM070 commented 4 years ago

Hi Chris,

Any progress on this issue yet? Really looking forward to it.

Thanks in advance for your effort.

Kind regards Mick

chrismaddalena commented 2 years ago

Hey @CyberM070, I haven't been able to work on this much since 2019, but I spent some time refactoring some code today. I added tracking and reporting for the positions. If a position is provided for the user it will appear by their name.

Before I can do much else I need a test database that has positions for users. The Gophish test db only has names and emails. Once I create a test db with a better variety of data I'll see about adding in reporting for positions.