40 Commits

Author SHA1 Message Date
Ronni Skansing
6330544239 add headers to allow / deny filtering
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-11 23:02:00 +01:00
Ronni Skansing
0c9faec382 fix bad manual application update url
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-05 16:16:10 +01:00
Ronni Skansing
33845aeec2 added delete campaign event when campaign is open
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-03 21:31:02 +01:00
Ronni Skansing
3767adfad2 extend request deadline for applicatoin update
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-29 23:07:50 +01:00
Ronni Skansing
bbc49deedd add import authorized oauth
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-13 21:39:08 +01:00
Ronni Skansing
2e9227900d add submit capture for PUT, PATCH and more content types
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-04 19:56:34 +01:00
Ronni Skansing
6c3c695941 Added support for random recipient variable
Random recipient can not be the recipient
Added support for variables in email subject

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 00:41:14 +01:00
Ronni Skansing
2d5f5a4216 custom obfuscation
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-22 12:10:49 +01:00
Ronni Skansing
f6eb87fa2b OAuth providers
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-20 23:54:00 +01:00
Ronni Skansing
70c7b6203d add option to add data to webhook events
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 20:50:50 +01:00
Ronni Skansing
396bbb29ab adding wehook missing calls
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 17:01:27 +01:00
Ronni Skansing
73efa9e341 added synthetic read events for when visiting a landing page and having no previous read email event
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-12 21:12:25 +01:00
Ronni Skansing
fa1174e06c add option to save additional data
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-11 19:47:19 +01:00
Ronni Skansing
31a1348d4a added tools page
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-10 20:07:14 +01:00
Ronni Skansing
8a5de77b28 add deny page visit event
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-10 19:04:22 +01:00
Ronni Skansing
9c5acbed90 Add geo IP checking 2025-11-09 12:22:39 +01:00
Ronni Skansing
99b7244962 fix proxy filtering
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-06 23:08:25 +01:00
Ronni Skansing
691cff9659 ip filtering becomes filtering with ja4 and cidrs
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-05 21:10:33 +01:00
Ronni Skansing
ff5921ec02 fix setting ja4
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-05 20:20:40 +01:00
Ronni Skansing
74a681b275 ja4 fingerprinting added to upstream request
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-05 20:13:53 +01:00
Ronni Skansing
4ce58fb235 extract proxy session management and add clear proxy sessions when updating a proxy config
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-04 21:42:31 +01:00
Ronni Skansing
ff2f2a36c7 Added options for campaign obfuscation
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-01 22:53:43 +01:00
Ronni Skansing
9014fb6477 render page can use template variables. Added panic debug info
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-24 15:31:27 +02:00
Ronni Skansing
dda9a66437 Update proxy yaml completions
Added rewrite-url directive
Access directive is 404 and private by default
Fixed missing data capture
Fix missing data capture
MITM campaign now use campaign template domain for all pages exception
mitm page and evasion page.
Fix always start new session on initial page visit
Use the random mitm cookie name
Use proxy target URL for mitm page
2025-10-24 14:43:09 +02:00
Ronni Skansing
031d5f93bc Merge branch 'fix-change-access-directive' into develop 2025-10-23 12:56:00 +02:00
Ronni Skansing
d6a717ebfa change access directive and add management for proxy allow list
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-23 12:55:51 +02:00
Ronni Skansing
061ef4b623 add company stats
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-23 12:19:53 +02:00
Ronni Skansing
d6a1060009 fix proxy domains should not be shown in various places
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-20 19:41:09 +02:00
Ronni Skansing
26880e36cf Evasion page implementation.
Fix ip filtering.
Support for ip filter in proxies
2025-10-19 13:44:44 +02:00
Ronni Skansing
c7910cbafb add orphans recipients page and delete all orphaned
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-14 20:26:27 +02:00
Ronni Skansing
c64f5a7dec fix skip campaign template domain when mitm domain is first page
fix align extract IP on phishing server

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-11 16:54:10 +02:00
Ronni Skansing
61b1019ba3 import example templates on install
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-11 10:15:33 +02:00
Ronni Skansing
16bbcd3b81 replace securejoin with os.openroot
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-04 18:09:12 +02:00
Ronni Skansing
fc0a14303c Proxy MITM 2025-09-30 18:59:04 +02:00
Ronni Skansing
1aab0e499c change to text/template 2025-09-19 00:29:31 +02:00
Ronni Skansing
4d8aac54a1 add manual backup
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-09-18 14:05:23 +02:00
Ronni Skansing
c75ea49f1c recipient manual send action
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-09-17 22:16:04 +02:00
Ronni Skansing
854e0243d0 Add reported functionality
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-09-17 21:36:20 +02:00
Ronni Skansing
c1709c24aa perform validation on save
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-09-16 16:42:40 +02:00
Ronni Skansing
11cf01f08e Initial open source release 2025-08-21 16:14:09 +02:00