GoPhish! – Install tutorial for InfoSec people to train staff on phishing

So I have fired up a VM of Ubuntu and typed the following

GoPhish2

I soon found out that on a vanilla install GO want installed. So to fix this I did ant apt-get install to get GO installed.

GoPhish3

Type y
and wait for it to download and install.

Once that has completed you will need to do the following command

GoPhish4

and you will find out that your $GOPATH is not set.

So we do the following to set your working area.

GoPhish5

Once you have done this, you can stay in the directory you are already in and do a “go build”.

GoPhish6

If we look in the directory you can now see we have a binary 🙂

GoPhish7

From here its a simple case of running
“sudo ./gophish”

GoPhish8

Now we need to fire up the browser and navigate to
http://localhost:3333

 

GoPhish9

You can login with the default
username: admin
password: gophish

you will be greeted with the menu below.

GoPhish10

 

I suggest that you change the default password to something else.

 

GoPhish11

and at this point your pretty much ready to go in terms of the install.

If you are targeting users only on your LAN, then your good to go, if you are targeting your remote staff then you need to set a couple of firewall rules to allow the click back to get to the phishing VM.

Here you would now need to go on and configure your SMTP settings, create some templates and start educating your staff!

If you want further guides on setting up SMTP and templates, please let me know and i will create another guide.