Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

You-Got-Phished email & Dynamic Login Webpage added #37

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

Script-Nomad
Copy link

The "You-Got-Phished" pretext uses an all-image email template that is best utilized with the message padding plugin in order to overcome spam filters which target emails with an insufficient text-image ratio. The pretext preys upon users in organizations which actively look for phishing emails or undergoes significant training. The pretext focuses on users' concerns that they fell for a previous phish and redirects them to the landing page.

The message should be formated simply using an inline_image as follows:
<a href="{{ url.webserver }}">{{ inline_image('/path/to/you-got-phished.png') }}</a>

Note that if you utilize a remote-image, and a user's email client does not automatically load remote content, the image will not render. In this instance, it may be beneficial to create a backup pretext in the alt parameter of your img tag, hence why inline_images are recommended.


The Dynamic login page simply uses jinja tags to generate the user's name & pre-fill the username with their email to make it appear as though they have visited the page before. Additionally, if a company logo is supplied in the `./images/logo.png` file, it will be rendered at the top of the login portal to add to its legitimate appearance.

Worked hard on this one. Hope it gets used 🥂

@stale
Copy link

stale bot commented Sep 5, 2018

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the stale label Sep 5, 2018
@Silburfuchs Silburfuchs self-requested a review September 5, 2018 19:04
@zeroSteiner zeroSteiner added the pinned Do not mark as stale label Sep 5, 2018
@stale stale bot removed the stale label Sep 5, 2018
@Script-Nomad
Copy link
Author

Script-Nomad commented Jun 27, 2019

@zeroSteiner Noticed this was sitting in my PRs for a while. Is there anything that needs to be done with this further, or is it good for merge?

@zeroSteiner
Copy link
Collaborator

Yeah, we'll just need a review from someone. @securestate/king-phisher any takers?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pinned Do not mark as stale
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants