mcpField
P
performing-red-team-phishing-with-gophish

performing-red-team-phishing-with-gophish

github.com/mukul975Security35.2k78 installsUpdated 8w ago
Repository

About performing-red-team-phishing-with-gophish

A skill for authorized GoPhish phishing exercises, aimed at security assessors. It uses the Python library to configure and monitor campaigns, then analyze opens, clicks, submissions, and reports.

Key features

  1. 01Configure campaigns through the API
  2. 02Create email templates and landing pages
  3. 03Set SMTP sending profiles
  4. 04Import target groups from CSV
  5. 05Analyze opens, clicks, and submissions

Use cases

  1. 01Run authorized phishing assessments
  2. 02Test security controls in a lab
  3. 03Conduct scheduled security audits
  4. 04Summarize campaign results for incident response

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/mukul975/anthropic-cybersecurity-skills --skill performing-red-team-phishing-with-gophish

After installing, type/performing-red-team-phishing-with-gophishin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

LICENSE
references/
api-reference.md
scripts/
agent.py

Details

From the project README

When to Use

  • When conducting security assessments that involve performing red team phishing with gophish
  • When following incident response procedures for related security events
  • When performing scheduled security testing or auditing activities
  • When validating security controls through hands-on testing

Prerequisites

  • Familiarity with security operations concepts and tools
  • Access to a test or lab environment for safe execution
  • Python 3.8+ with required dependencies installed
  • Appropriate authorization for any testing activities

Instructions

  1. Install dependencies: pip install gophish requests
  2. Deploy GoPhish server and obtain an API key from Settings.
  3. Use the Python gophish library to automate campaign setup:
    • Create email templates with HTML body and tracking
    • Configure SMTP sending profiles
    • Import target groups from CSV
    • Create landing pages for credential capture
    • Launch and monitor campaigns
  4. Analyze campaign results: opens, clicks, submitted data, reported.
# For authorized penetration testing and lab environments only
python scripts/agent.py --gophish-url https://localhost:3333 --api-key <key> --campaign-name "Q1 Awareness" --output phishing_report.json

Examples

Create Campaign via API
from gophish import Gophish
from gophish.models import Campaign, Template, Group, SMTP, Page
api = Gophish("api_key", host="https://localhost:3333", verify=False)  # Self-signed cert on localhost lab
campaign = Campaign(name="Q1 Test", groups=[Group(name="Sales Team")],
    template=Template(name="IT Password Reset"), smtp=SMTP(name="Internal SMTP"),
    page=Page(name="Credential Page"))
api.campaigns.post(campaign)

Comments

Markdown supported