search

gophish / gophish

Open-Source Phishing Toolkit
https://getgophish.com
Other
11.34k stars 2.2k forks source link

Ability to get phishing summary information per groups or users #1966

Open glennzw opened 4 years ago

glennzw commented 4 years ago

At the moment there's no functionality to get information on how well/badly groups or individual users are performing overall in all the campaigns they've been involved in. I think it'd be very useful information to know the phishing success/failure rates per group and per user.

My proposal is that we alter the 'Users & Groups' tab. This is the current view:

gophish_old_usersgroups

Below is a mock-up of my proposed view, containing summary data on how each group has performed:

gophish_new_usersgroups

I've removed the 'Modified Date' to make space for the other fields - which I think are more useful. Perhaps we could keep modified date as a mouse over text, or add an option to sort by modified date.

The 'Status' would be a loose calculation based on how often the users click links, submit data vs reporting.

We could still Edit the group and Delete the group as before, but the extra button would let you view all users in that group - giving similar summary data but per user, as mocked up below:

gophish_users

I've started having a look at how to implement this. I think the one problem is that after a campaign has been created there doesn't appear to be a way to link a campaign to a group - only the user_id is stored in the campaign, not the group_id. I suspect we'd need to add group_id to campaigns, and then modify or borrow logic from GetCampaignSummaries. This function currently lets you filter by campaign id - if we could filter by group id we'd get our required data to populate the new layout.

Well, I'd be interested to hear what y'all think before I start doing any serious work.

CyberM070 commented 3 years ago

This is great! Right now this requires quite some manual analysis, so this would defitinely add value to Gophish!