GoPhish Setup

Installing GoPhish

## Installing go
----------------
apt-get update
apt-get install build-essential
wget https://golang.org/dl/go1.16.6.linux-amd64.tar.gz
tar xvf go1.16.6.linux-amd64.tar.gz
sudo chown -R root:root ./go
sudo mv go /usr/local

## Setting go paths
-------------------
sudo nano ~/.profile

## At the end of file write paste
export GOPATH=$HOME/work
export PATH=$PATH:/usr/local/go/bin:$GOPATH/bin

## Refresh profile
source ~/.profile

## Install GoPhish
git clone https://github.com/gophish/gophish
cd gophish/
<Remove IOCs  X-Mailer from /gophish/models/smtp_test.go and 
rid from /gophish/models/campaign.go>
go build


Find a file named config.json change listen_url from 127.0.0.1:3333 to 0.0.0.0:3333


apt-get install certbot
certbot certonly -d phishdomain.tk --manual --preferred-challenges dns
<ADD the txt to the DNS server record in Cloud Flare>

Copy /etc/letsencrypt/live/[DOMIAN]/privkey.pem into a file like [DOMAIN].key 
and /etc/letsencrypt/live/[DOMAIN]/fullchain.pem into a file like [DOMAIN].crt

Then run 

sudo ./gophish

Configure Evilginx2

A header by the name of evilginx gets added in case of a proxy request (/core/http_proxy.go

git clone https://github.com/kgretzky/evilginx2.git
cd evilginx2                                       
make           
sudo cp bin/evilginx /usr/bin
sudo cp -r phishlets/ /usr/share/evilginx/
sudo cp -r templates /usr/share/evilginx/

Next let us configure evilginx2 next and domain,IP and the redirect URL.

: config domain {domainname}
: config ip {server's ip}
: config redirect_url https://google.com
: phishlets hostname {phishlet's name} {domainname}

Next we need to check whether we need to set A or CNAME for any 
subdomains pertaining to the phishlet

: phishlets get-hosts linkedin
143.244.130.189 www.phishdomain.tk

So we create an A record for the subdomain

: phishlets enable linkedin
: lures create linkedin

Last updated