search

pentestgeek / phishing-frenzy-templates

Phishing Scenarios Used for Phishing Frenzy
203 stars 104 forks source link

Gophish spoofing #17

Open Paulstaley opened 5 years ago

Paulstaley commented 5 years ago

I'm trying to spoof an email to test the users at the company I work at. I can't seem to send spoofed emails. After reading, I saw stuff about creating an email relay. Can someone provide some guidance on how to spoof an email with gophish.

Our email is hosted from office 365.

zeknox commented 5 years ago

Spoofing will be dependent on the configuration of the SPAM filter which receives the email. Even when using an SMTP relay, it is likely to get processed by the clients SPAM filter.

Your not always able to spoof. It really is reliant on the configuration of a SPAM filter, whether the domain your trying to spoof is configured with SPF or DKIM.

If your unable to spoof, you may want to look into purchasing a valid domain name and configure it with SPF and DKIM.

Cheers,

— Brandon McCann

On Jan 28, 2019, at 4:45 PM, Paulstaley notifications@github.com wrote:

I'm trying to spoof an email to test the users at the company I work at. I can't seem to send spoofed emails. After reading, I saw stuff about creating an email relay. Can someone provide some guidance on how to spoof an email with gophish.

Our email is hosted from office 365.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.