Changelog
This page details the changes between FiercePhish versions. You can find the development changelog here
- Fixed significant bug that would cause adding 'all targets' to a list only to add halfish of the targets if the target list was significantly larger than 1000 targets
- Fixed #52
- Updated the text editor for email templates and simple send to allow you to use full HTML and styling (#45)
- Increased the speed of the email template creation page
- Fixed a javascript bug that was preventing the background javascript jobs from running due to an updated dependency
- Fixed a bug with Target User "notes" showing "null" as a string instead of Empty
- Fixed a bug where you couldn't omit the last name of a target user
- Fixed a bug where you could add a hidden target user to a list (#43)
- Fixed two critical bugs regarding email sending and changing settings
- Increased logging so if an email fails to send, it will actually keep logs of the reason
- Fixed an issue where an email says it was successfully sent when it really wasn't.
This version breaks backward compatibility and requires PHP >=5.6. This eliminates default Ubuntu 14.04 install.
You cannot update from v1.1.0 to v1.2.0 without a full reinstall unfortunately. This won't happen again!
- Feature: INBOX feature is now functioning. Installer has been updated to properly configure the IMAP connection, and the wiki pages have been updated with installation instructions
- Feature: SMTP logs are shown for each email sent. You can find these logs on the "details" page of each sent email
- Feature: Log viewer and log export can be found under "Settings" --> "Logs". This will show SMTP, Dovecot, ActivityLogs, Apache logs, etc. All logs are available for export on that page as well.
- Feature: Updated framework to Laravel 5.4 + rewrites to some pages to be more efficient
- Feature: There is now an "update.sh" script that will check for new versions of FiercePhish and update it if there is a new version available.
- Enhancement: Added "Planned Send At" field to emails to show when future emails are expected to be sent.
- Enhancement: Refactored "Simple Send" to create a hidden "Target User" for each email sent so all emails can be tracked easily like that.
- Enhancement: 2-FA portal now auto-submits when the token code is typed in instead of having to hit Enter
- Enhancement: Refactored datatables code to make it more efficient and easier to maintain. It should also operate faster under large workloads.
- Enhancement: The installer has been completely rewritten to be much better at error detection and now prompts for all the information ahead of time so you can fill in the required information and walk away.
- Enhancement: Installer has been renamed to "install.sh" instead of "installer.sh"
- Enhancement: Added the ability to remove a single person from a list
- Enhancement: Added the ability to resend individual emails and cancel individual emails
- Enhancement: Added a color font and color background button to the editors for the email bodies.
- Enhancement: Completely removed "ProcessingJob" in favor of a baked in solution that actually shows the correct jobs in the queue.
- Enhancement: Separated out the processing queues into more specific branches. This requires a supervisord config change
- Enhancement: Significantly increased the performance of adding random users and unassigned users to lists.
- Bug fix: Better timezone functionality has been implemented so if you change the timezone in Settings, all timestamps are shown correctly.
- Bug fix: Fixed various verbiage
- Bug fix: Fixed the TargetUser list not working with a URL Prefix set.
- Bug fix: Fixed the settings page from redirecting to the wrong location if you are using a non-standard Apache port
- Bug fix: Fixed the bug where if you click "Cancel Campaign" and decide to not cancel by clicking "Cancel", it would still cancel the campaign
- Configuration change: Installer now properly handles setups where the user is trying to spoof another domain name instead of buying their own domain
- Configuration change: Supervisor configuration was changed to work better with the new versions of laravel. It will also process background jobs much faster since the framework doesn't have to be constantly restarted.
- FiercePhish now requires a cron entry to be added. The installer and updater both will perform these actions automatically.
- Feature: 2FA Google Authentication added (Issue #26)
- Feature: Added [first_name] and [last_name] variables to email templates. (Issue #25)
- Feature: Added "APACHE_PORT" to installer which allows you to specify the port for Apache to run on (Issue #27)
- Feature: UUID is now stored in the database for each email for easy lookups (Issue #24)
- Feature: New queueing system for importing Target Users, adding Target Users to Lists, and creating Campaigns now allows for better scalability (Issue #13)
- Feature: General improvements for scalability. FiercePhish has been tested with campaigns up to 40,000 target users (Issue #13)
- Feature: Added proxy settings for using FiercePhish from behind a proxy or a load balancer (Issue #14)
- Bug Fix: Added verification of a correct root MySQL password in the automated installer. (Issue #12)
- Initial release