chrismaddalena / Goreport

A Python script to collect campaign data from Gophish and generate a report
BSD 3-Clause "New" or "Revised" License
179 stars 50 forks source link

Gophish logs "Email open" and "Clicked link" immediately after the campaign is started, can Goreport solve this? #31

Open Desiqvel opened 2 years ago

Desiqvel commented 2 years ago

Hi, Thanks for the great tool you have made! But I have a problem where Gophish logs "Email open" and "Clicked link" immediately after the campaign is sent, is there an option or some config configuration that removes these false positives? (For example remove/ignore the first 3 minutes or remove/ignore any addresses except Norway)

Under you can see an example where someone actually opened and clicked the link but it registers multiple times that shows in the high level results shown in the bottom. I started the campaign 2022-05-23 T10:56:46

image

False positive with real user later image

Only false positive image

High Level Results Total Targets: 352

The following totals indicate how many events of each type Gophish recorded: Total Open Events: 1644 Total Click Events: 780 Total Report Events: 0 Total Submitted Data Events: 24

The following totals indicate how many targets participated in each event type: Individuals Who Opened: 351 Individuals Who Clicked: 351 Individuals Who Reported: 0 Individuals Who Submitted: 23

Loner291999 commented 2 years ago

I believe this is more of a GoPhish issue rather than a GoReport issue