Gophish: Open-Source Phishing Toolkit
Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training.
Installation of Gophish is dead-simple - just download and extract the zip containing the release for your system, and run the binary. Gophish has binary releases for Windows, Mac, and Linux platforms.
- Go (use the version specified in
go.mod) - SQLite (default local DB uses SQLite)
- Node.js + npm (only required if you modify frontend assets under
static/js)
git clone https://github.com/gophish/gophish.git
cd gophish
go mod download
go build ./...This produces the gophish binary in the repo root.
./gophishBy default, Gophish reads config.json. Update it as needed for local ports, TLS certificates, and database settings.
After starting, open https://localhost:3333 and log in with the credentials printed in the server log output.
If you change files in static/js/src, rebuild the bundled assets:
npm install
npm run buildRun the full Go test suite:
go test ./...Optional lint/static checks:
go vet ./...You can also use Gophish via the official Docker container here.
After running the Gophish binary, open an Internet browser to https://localhost:3333 and login with the default username and password listed in the log output. e.g.
time="2020-07-29T01:24:08Z" level=info msg="Please login with the username admin and the password 4304d5255378177d"
Releases of Gophish prior to v0.10.1 have a default username of admin and password of gophish.
Documentation can be found on our site. Find something missing? Let us know by filing an issue!
When creating a new campaign, you can optionally add a comma-separated list of CC recipients. This list is applied to every email sent for that campaign.
Steps:
- Open New Campaign.
- Fill out campaign details as usual.
- In CC (Optional), enter addresses like
cc1@example.com, cc2@example.com(semicolons are also accepted). - Launch the campaign.
Find a bug? Want more features? Find something missing in the documentation? Let us know! Please don't hesitate to file an issue and we'll get right on it.
Gophish - Open-Source Phishing Framework
The MIT License (MIT)
Copyright (c) 2013 - 2020 Jordan Wright
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software ("Gophish Community Edition") and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in
all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
THE SOFTWARE.