search

emalderson / ThePhish

ThePhish: an automated phishing email analysis tool
GNU Affero General Public License v3.0
1.14k stars 175 forks source link

[Question] External API Call #17

Closed gaglimax closed 2 years ago

gaglimax commented 2 years ago

Work environment

Question | Answer -- | -- OS version (server) | RHEL7, Docker OS version (client) | NA Python version | NA Type of email address used | NA Mail client type & version | NA Browser type & version | Firefox Virtualized Env. | True Dedicated RAM | NA vCPU | NA ThePhish version | Latest TheHive version | NA Cortex version | NA MISP version | NA Installed using Docker and Docker Compose | True Docker Version | 20.10.3 Docker Compose version | 1.29.0

Question

I started to POC ThePhish. Without configuring anything, I noticed in DevTools that ThePhish does external call to "fonts.googleapis.com" and "cdnjs.cloudflare.com".

ThePhish is installed in an environnement without internet access by default.

My question is : is it mandatory to open some external web address in proxies ?

Thanks in advance.

emalderson commented 2 years ago

Hello, the requests that you see are made just because the index.html file uses some css and javascript files that are fetched from the internet in order to make bootstrap work. You can just locate the rows in the index.html where those requests are made and replace them with requests to the local version of those files. You have to download those files and place them in the folder structure, then you can replace the paths with their local counterparts.

https://github.com/emalderson/ThePhish/blob/59efad6ab2191af3baea6309656f5b73d00562ad/app/templates/index.html#L10-L14

https://github.com/emalderson/ThePhish/blob/59efad6ab2191af3baea6309656f5b73d00562ad/app/templates/index.html#L85-L88

gaglimax commented 2 years ago

Thank you for the quick reply. I close the issue.