Skip to content
Home

GoPhish: phishing campaign framework

Open-source platform for running, tracking and reporting on simulated phishing campaigns.

bash·1 min read··INE Certification

GoPhish is built for authorized phishing simulations: segmenting targets, cloning landing pages, scheduling sends, and tracking opens/clicks/submitted-data in real time so you can report on an organization’s click-through rate.

Running it

./gophish.exe               # admin UI at 127.0.0.1:3333

# default credentials
# admin / gophish
  • msfvenom — generate the payload attached to or linked from a campaign
  • PowerShell Empire — a lighter-footprint C2 option for whatever a clicked payload lands
  • Metasploit Framework — the usual handler for a reverse shell delivered this way