gophish

Gophish fork This is a fork of Gophish: Open-Source Phishing Toolkit Gophish New features This fork has a focus on running real-life phishing campaigns for a single customer. The following features are added: Script to automatically setup a fully configured Gophish instance on a fresh VPS. This...

Goreport

Goreport v3.0, a Gophish Reporting Tool This script accepts your Gophish campaign IDs as a parameter and then collects the campaign results to present the statistics and perform user-agent parsing and geolocation lookups for IP addresses. Goreport generates lists of IP addresses, operating system...

evilgophish

Table of Contents evilgophish A Word About Sponsorship Credits Prerequisites Disclaimer Why? Background Infrastructure Layout setup.sh Cloudflare Turnstile Setup Cloudflare Turnstile HTML Template Guide replacerid.sh Email Campaign Setup QR Code Generator SMS Campaign Setup Live Feed Setup A Word...

gophish

Gophish Gophish: オープンソースのフィッシングツールキット Gophishは、企業やペネトレーションテスター向けに設計されたオープンソースのフィッシングツールキットです。フィッシング演習やセキュリティ意識向上トレーニングを迅速かつ簡単にセットアップして実行する機能を提供します。 インストール Gophishのインストールは非常に簡単です。お使いのシステム向けのリリースを含むzipファイルをダウンロードして解凍し、バイナリを実行するだけです。GophishはWindows、Mac、Linuxプラットフォーム向けのバイナリリリースを提供しています。 ソースからビルド...

evilgophish

Table of Contents evilgophish 스폰서십에 관한 말 크레딧 전제 조건 면책 조항 왜? 배경 인프라 구조 setup.sh Cloudflare Turnstile 설정 Cloudflare Turnstile HTML 템플릿 가이드 replacerid.sh 이메일 캠페인 설정 QR 코드 생성기 SMS 캠페인 설정 라이브 피드 설정 Phishlet에 관한 말 Evilginx3 업데이트에 관한 말 디버깅 설치 참고 사항 캠페인 테스트 및 추적에 관한 참고 사항 블랙리스트 및 추적에 관한 참고 사항 GoPhish 변경 ...

decode-spam-headers

decode-spam-headers.py Whether you are trying to understand why a specific e-mail ended up in SPAM/Junk for your daily Administrative duties or for your Red-Team Phishing simulation purposes, this script is there for you to help! Idea arose while delivering a commercial Phishing Simulation...

flyphish

Flyphish Flyphish is an Ansible playbook allowing cyber security consultants to deploy a phishing server in the cloud for security assessments. The playbook installs and configures Gophish , Postfix and OpenDKIM on a virtual machine in the cloud. Additionally, for OPSEC purposes, the playbook...

SUSE CVE-2026-39904

Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a crafted Office document as an email template attachment. The ApplyTemplate function in models/attachment.go processes Office documents as ZI...

CVE-2026-82269

Gophish through 0.12.1 fails to enforce account lockout and password change requirements in the API authentication middleware. Attackers with valid API keys can bypass these security controls and retain full API access even when their account is locked or password change is required...

CVE-2026-82269

Gophish through 0.12.1 has a flaw in its API authentication middleware that fails to enforce account lockout and forced password change policies when a user authenticates with a valid API key. An attacker who already holds a valid API key can retain full API access even after the associated accou...

CVE-2026-82269 Gophish Account Lockout and Forced Password Change Bypassable via API Key

Gophish through 0.12.1 fails to enforce account lockout and password change requirements in the API authentication middleware. Attackers with valid API keys can bypass these security controls and retain full API access even when their account is locked or password change is required...

CVE-2026-82269 Gophish Account Lockout and Forced Password Change Bypassable via API Key

Gophish through 0.12.1 fails to enforce account lockout and password change requirements in the API authentication middleware. Attackers with valid API keys can bypass these security controls and retain full API access even when their account is locked or password change is required...

CVE-2026-82269 Gophish Account Lockout and Forced Password Change Bypassable via API Key

Gophish through 0.12.1 fails to enforce account lockout and password change requirements in the API authentication middleware. Attackers with valid API keys can bypass these security controls and retain full API access even when their account is locked or password change is required...

EUVD-2026-67800

Gophish through 0.12.1 fails to enforce account lockout and password change requirements in the API authentication middleware. Attackers with valid API keys can bypass these security controls and retain full API access even when their account is locked or password change is required...

PT-2026-83292

Gophish through 0.12.1 fails to enforce account lockout and password change requirements in the API authentication middleware. Attackers with valid API keys can bypass these security controls and retain full API access even when their account is locked or password change is required...

CVE-2026-82269: Authentication Bypass Using an Alternate Path or Channel

Gophish through 0.12.1 fails to enforce account lockout and password change requirements in the API authentication middleware. Attackers with valid API keys can bypass these security controls and retain full API access even when their account is locked or password change is required...

GO-2026-6212 Gophish contains a denial of service vulnerability in github.com/gophish/gophish

Gophish contains a denial of service vulnerability in github.com/gophish/gophish...

PT-2026-80439

Gophish contains a denial of service vulnerability in github.com/gophish/gophish...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the ApplyTemplate process in models/attachment.go when handling Office document attachments as ZIP archives. An attacker can cause the server to exhaust memory resources by uploadi...

Gophish contains a denial of service vulnerability

Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a crafted Office document as an email template attachment. The ApplyTemplate function in models/attachment.go processes Office documents as ZI...