Giter Club home page Giter Club logo

healthcheck's Introduction

gophish logo

Gophish

Build Status GoDoc

Gophish: Open-Source Phishing Toolkit

Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training.

Install

Installation of Gophish is dead-simple - just download and extract the zip containing the release for your system, and run the binary. Gophish has binary releases for Windows, Mac, and Linux platforms.

Building From Source

If you are building from source, please note that Gophish requires Go v1.10 or above!

To build Gophish from source, simply run git clone https://github.com/gophish/gophish.git and cd into the project source directory. Then, run go build. After this, you should have a binary called gophish in the current directory.

Docker

You can also use Gophish via the official Docker container here.

Setup

After running the Gophish binary, open an Internet browser to https://localhost:3333 and login with the default username and password listed in the log output. e.g.

time="2020-07-29T01:24:08Z" level=info msg="Please login with the username admin and the password 4304d5255378177d"

Releases of Gophish prior to v0.10.1 have a default username of admin and password of gophish.

Documentation

Documentation can be found on our site. Find something missing? Let us know by filing an issue!

Issues

Find a bug? Want more features? Find something missing in the documentation? Let us know! Please don't hesitate to file an issue and we'll get right on it.

License

Gophish - Open-Source Phishing Framework

The MIT License (MIT)

Copyright (c) 2013 - 2020 Jordan Wright

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software ("Gophish Community Edition") and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in
all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
THE SOFTWARE.

healthcheck's People

Contributors

jordan-wright avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar

healthcheck's Issues

Test GSuite Impersonation Settings

GSuite allows administrators to enable protections for various settings. It would be good to offer this as a recommended test suite if we determine the MX records for a domain point to Gmail (could also be done by inspecting SPF/DMARC records).

(Source)

Advanced SPF Checks

When it comes to more advanced validation of a mail receiver I would like to check how the server handles the following SPF results.

  • Pass
  • Fail
  • SoftFail
  • Neutral
  • None
  • PermError
  • TempError

Add Check for VRFY Command

We should check and see if the mail server supports the VRFY command, as this could lead to unintended information disclosure.

(service error) Why was it denied for "Accept error"??

I used gophish service.
But I can see the error message on service. what's the problem?
my gophish service is discontinued after this error messages.

----------error message-------------

Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15G77"
2019/08/29 08:31:51 http: Accept error: accept tcp [::]:12189: accept4: too many open files; retrying in 5ms
2019/08/29 08:31:51 http: Accept error: accept tcp [::]:12189: accept4: too many open files; retrying in 10ms
2019/08/29 08:31:51 http: Accept error: accept tcp [::]:12189: accept4: too many open files; retrying in 20ms
2019/08/29 08:31:51 http: Accept error: accept tcp [::]:12189: accept4: too many open files; retrying in 40ms
2019/08/29 08:31:51 http: Accept error: accept tcp [::]:12189: accept4: too many open files; retrying in 80ms
2019/08/29 08:31:51 http: Accept error: accept tcp [::]:12189: accept4: too many open files; retrying in 160ms
2019/08/29 08:31:51 http: Accept error: accept tcp [::]:12189: accept4: too many open files; retrying in 320ms


"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)"
2019/08/29 08:31:53 http: Accept error: accept tcp [::]:12189: accept4: too many open files; retrying in 10ms
2019/08/29 08:31:53 http: Accept error: accept tcp [::]:12189: accept4: too many open files; retrying in 20ms
2019/08/29 08:31:53 http: Accept error: accept tcp [::]:12189: accept4: too many open files; retrying in 40ms
2019/08/29 08:31:54 http: Accept error: accept tcp [::]:12189: accept4: too many open files; retrying in 80ms
2019/08/29 08:31:54 http: Accept error: accept tcp [::]:12189: accept4: too many open files; retrying in 160ms
time="2019-08-29T08:31:54+09:00" level=fatal msg="open static/db/geolite2-city.mmdb: too many open files"


I want to know the cause in order to prevent recurrence.

Thank you.

STARTTLS Verification

Does the receiving server accept messages over TLS. There could also be a check if the certificate presented is a "trusted" cert, however that would require maintaining a trusted CA list. Maybe just showing the cert in the results of the test would fulfill the needs.

SPF Macros

It would be interesting to determine how a mail receiver behaves to a SPF record that contains macros. The main test should be how a receiver handles a message that would fail a published SPF record that contains macros.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.