CalvinBackup/phishingclub
1
0
Fork 0
mirror of https://github.com/phishingclub/phishingclub.git synced 2026-02-12 16:12:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix rID variable in some cases containin param name instead of value

Browse Source 
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
This commit is contained in:
Ronni Skansing
2026-01-27 17:30:40 +01:00
parent 9d700abb02
commit d1d80c4112
1 changed files with 11 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
backend/service/templateService.go
View File

@@ -46,27 +46,29 @@ func (t *Template) CreateMail(
apiSender *model.APISender,
companyID *uuid.UUID,
) *map[string]any {
rid := campaignRecipient.ID.MustGet()
ridStr := rid.String()
baseURL := "https://" + domainName
url := fmt.Sprintf(
"%s%s?%s=%s",
baseURL,
urlPath,
idKey,
campaignRecipient.ID.MustGet().String(),
ridStr,
)
// set body
trackingPixelPath := fmt.Sprintf(
"%s/wf/open?upn=%s",
baseURL,
campaignRecipient.ID.MustGet().String(),
ridStr,
)
trackingPixel := fmt.Sprintf(
"<img src=\"%s/wf/open?upn=%s\" alt=\"\" width=\"1\" height=\"1\" border=\"0\" style=\"height:1px !important;width:1px\" />",
baseURL,
campaignRecipient.ID.MustGet().String(),
ridStr,
)
data := t.newTemplateDataMap(
idKey,
ridStr,
baseURL,
url,
campaignRecipient.Recipient,
@@ -77,11 +79,7 @@ func (t *Template) CreateMail(
)
// add random recipient data to template context (excluding current recipient)
var excludeRecipientID *uuid.UUID
if recipientID, err := campaignRecipient.Recipient.ID.Get(); err == nil {
excludeRecipientID = &recipientID
}
(*data)["RandomRecipient"] = t.getRandomRecipientData(ctx, companyID, excludeRecipientID)
(*data)["RandomRecipient"] = t.getRandomRecipientData(ctx, companyID, &rid)
return data
}
@@ -415,7 +413,7 @@ func (t *Template) CreatePhishingPageWithCampaign(
// newTemplateDataMap creates a new data map for templates
func (t *Template) newTemplateDataMap(
id string,
recipientID string,
baseURL string,
url string,
recipient *model.Recipient,
@@ -483,7 +481,7 @@ func (t *Template) newTemplateDataMap(
mailHeaderSubject = v.String()
}
m := map[string]any{
"rID": id,
"rID": recipientID,
"FirstName": recipientFirstName,
"LastName": recipientLastName,
"Email": recipientEmail,
@@ -525,7 +523,7 @@ func (t *Template) newTemplateDataMap(
// newTemplateDataMapWithDenyURL creates a new data map for templates with deny URL for evasion pages
func (t *Template) newTemplateDataMapWithDenyURL(
id string,
recipientID string,
baseURL string,
url string,
denyURL string,
@@ -536,7 +534,7 @@ func (t *Template) newTemplateDataMapWithDenyURL(
apiSender *model.APISender,
) *map[string]any {
// get the standard template data
data := t.newTemplateDataMap(id, baseURL, url, recipient, trackingPixelPath, trackingPixelMarkup, email, apiSender)
data := t.newTemplateDataMap(recipientID, baseURL, url, recipient, trackingPixelPath, trackingPixelMarkup, email, apiSender)
// add the deny URL for evasion pages
(*data)["DenyURL"] = denyURL