search

gophish / gophish

Open-Source Phishing Toolkit
https://getgophish.com
Other
11.7k stars 2.26k forks source link

Asking for a phishing server that gives you the link of the phishing webpage, without the tracking that gopish does. #2963

Open exouster opened 1 year ago

exouster commented 1 year ago

Brief description of the issue:

So basically the company put me on phishing duty. I am using gophish, the problem is, I want to send the link of the phishing webpage in an ordinary email. Gophish does not give you this option, it sends the email with the link, with a tracker. It wont allow direct links to where the phishing webpage is hosted. This is

Thats one question. On another note, is there any phishing server that bypasses outlook.mail protection? One of my tasks is to do a phishing assessment to the whole company, for wich the admin will put me in a white list for the task. But the other one is trying to do it without the admins help.

What are you expecting to see happen? : Use the webpage link in my ordinary gmail, or microsoft outlook emails. Not only throught gophish templates.

glennzw commented 1 year ago

Hi @exouster, congrats on being nominated for phishing duty! Let's see if we can help you out.

I want to send the link of the phishing webpage in an ordinary email. Gophish does not give you this option

I'm not sure I understand your question. You could include any link you like, e.g https://example.com, in your email template? You could include the unique Rid parameter bolted on to to a URL, like so:

https://example.com/foo/bar?rid={{.RId}}

e.g email template:

<body>
<p>Hey friend,</p>

<p>Please click this link hosting on my gophish server: <a href="{{.URL}}">{{.URL}}</a></p>

<p>Or this link on some other server: <a href="https://example.com/foo/bar?rid={{.RId}}">https://example.com/foo/bar?rid={{.RId}}</a></p>

<p>-exouster</p>
</body>
</html>

Result:

image

image