214 Commits

Author SHA1 Message Date
Ronni Skansing 8b955c4742 fix totp code not replayable
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-29 19:52:13 +02:00
Ronni Skansing c035e2b117 add state to SSO login flow
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-27 21:31:48 +02:00
Ronni Skansing db3860a440 Add support for custom certificates in proxy configuration 2026-04-23 17:56:56 +02:00
Ronni Skansing aa6b6b6c47 fix remove campaign webhooks and device codes on campaign delete
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-16 21:37:19 +02:00
Ronni Skansing fda18732f8 apply rewrite_urls rules when redirecting to proxy pages
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-16 21:08:43 +02:00
Ronni Skansing 06c73977b7 fix recipient url using start url path in proxy
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-13 22:08:42 +02:00
Ronni Skansing c4ed8cfeeb Late scheduling
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-02 10:55:50 +02:00
Ronni Skansing 10f201c5ca added proxy submit info event type
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-31 19:25:17 +02:00
Ronni Skansing 32bc29269e fix proxy normalize empty path to /
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 21:56:12 +02:00
Ronni Skansing fd078b453c add support for rewrite header engine
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 19:08:06 +02:00
Ronni Skansing 7c0626b7d1 add rewrite support for optional request path and method
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 17:01:41 +02:00
Ronni Skansing 69111015b2 fix one off query
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 16:44:05 +02:00
Ronni Skansing 8adc35d568 fix proxy replace header not working
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 16:26:04 +02:00
Ronni Skansing 83f9e8f279 add auto remove orphans
fix orphans in dynamic groups not included

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-29 16:30:01 +02:00
Ronni Skansing b0688f8da8 add dynamic groups
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-28 14:55:43 +01:00
Ronni Skansing 73b3287137 Add proxy support in device codes
Add clear device codes for campaign
2026-03-26 18:00:28 +01:00
Ronni Skansing c13180a27a remove DeviceCodeCaptured variable
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-21 12:58:40 +01:00
Ronni Skansing fc5e8e199b Add captured once behavior to device code phishing, update template keys and fix unneeded api calls
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-21 12:32:16 +01:00
Ronni Skansing 198c3a0f29 fix missing cascading of deleting an email used by templates or campaigns
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-21 12:31:31 +01:00
Ronni Skansing 43d6415894 MS Device code phishing
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-21 00:10:06 +01:00
Ronni Skansing 316120e7be fix domain sort by type
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-19 17:23:32 +01:00
Ronni Skansing baaea54d0e revert cookie storage changes
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-05 21:27:41 +01:00
Ronni Skansing 80cc140e71 fix dont mix legacy from cookie with cookie engine
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-05 21:09:21 +01:00
Ronni Skansing 710a0e4290 fix missing method check on cookie capture
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-05 18:56:42 +01:00
Ronni Skansing a3fc3d2d18 bump go version
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-02 20:52:01 +01:00
Ronni Skansing f8835f915a fix do not record email tracking pixel event after campaign closed
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-02 19:43:24 +01:00
Ronni Skansing 6f939c9ceb add manually set as sent detail
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-01 09:37:43 +01:00
Ronni Skansing 9efdb5c28d Add support for multiple webhooks per campaign
Add webhook links on campaign page

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 14:19:54 +01:00
Ronni Skansing d6ad85250f bump and clean vendor
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 02:03:33 +01:00
Ronni Skansing 2fb7ff72f3 fix potential reuse of oauth on failure to mark as used
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 01:34:12 +01:00
Ronni Skansing b7d440b183 add missing timeout to oauth handler
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 01:28:56 +01:00
Ronni Skansing c3271e1eee fix cookie expiration with tls flag
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 01:28:16 +01:00
Ronni Skansing 51f808c3f9 adjust comment
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 01:26:50 +01:00
Ronni Skansing f94bad547e fix panic in rate limiter and missing error in MFA
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 01:19:43 +01:00
Ronni Skansing 2a4da7eba2 dead code
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 01:02:17 +01:00
Ronni Skansing e7304eef1a fix sort/search by repeat offender
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-18 18:33:45 +01:00
Ronni Skansing 2f5d1163d2 add latest events to dashboard, remove completed, fix missing auto refresh box 2026-02-12 20:58:08 +01:00
Ronni Skansing 6330544239 add headers to allow / deny filtering
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-11 23:02:00 +01:00
Ronni Skansing 3dca7bc212 fix custom stat campaign start date
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-09 21:34:06 +01:00
Ronni Skansing 5e983a2998 fix missing sort column mapping for name on domain and allow deny
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-09 20:51:11 +01:00
Ronni Skansing c7e666da9a fix missing allow listing leading to bsqli
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-08 02:23:04 +01:00
Ronni Skansing 0c9faec382 fix bad manual application update url
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-05 16:16:10 +01:00
Ronni Skansing 78b2e57b14 Fix proxy bugs with domain rewrite outside scope, global rewrite more consistent, fix dublicate global rewrite, add global rewrite to body
Fix proxy replace without from too eager
Fix redundant proxy header rewrite
Fix multiline proxy yaml, do not format on backend
2026-02-05 15:42:55 +01:00
Ronni Skansing 42d3aa2c03 added hide test campaigns from campaigns page
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-04 22:25:19 +01:00
Ronni Skansing 95cd1f8a7c fix missing allow deny list on campaign create
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-04 21:09:25 +01:00
Ronni Skansing 33845aeec2 added delete campaign event when campaign is open
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-03 21:31:02 +01:00
Ronni Skansing 451b3800cd add proxy remove header by regex support
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 14:38:09 +01:00
Ronni Skansing d187cbb2e7 add support for {{.Origin}} in proxy response handler
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 12:17:26 +01:00
Ronni Skansing 5aa57a0c66 fix proxy goquery (dom engine) only on html content type
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 11:26:45 +01:00
Ronni Skansing 28d448c15f Added support for recipient variables in proxies
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 10:39:50 +01:00