62 Commits

Author SHA1 Message Date
Ronni Skansing
32bc29269e fix proxy normalize empty path to /
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 21:56:12 +02:00
Ronni Skansing
fd078b453c add support for rewrite header engine
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 19:08:06 +02:00
Ronni Skansing
7c0626b7d1 add rewrite support for optional request path and method
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 17:01:41 +02:00
Ronni Skansing
8adc35d568 fix proxy replace header not working
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 16:26:04 +02:00
Ronni Skansing
baaea54d0e revert cookie storage changes
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-05 21:27:41 +01:00
Ronni Skansing
80cc140e71 fix dont mix legacy from cookie with cookie engine
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-05 21:09:21 +01:00
Ronni Skansing
710a0e4290 fix missing method check on cookie capture
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-05 18:56:42 +01:00
Ronni Skansing
9efdb5c28d Add support for multiple webhooks per campaign
Add webhook links on campaign page

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 14:19:54 +01:00
Ronni Skansing
6330544239 add headers to allow / deny filtering
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-11 23:02:00 +01:00
Ronni Skansing
78b2e57b14 Fix proxy bugs with domain rewrite outside scope, global rewrite more consistent, fix dublicate global rewrite, add global rewrite to body
Fix proxy replace without from too eager
Fix redundant proxy header rewrite
Fix multiline proxy yaml, do not format on backend
2026-02-05 15:42:55 +01:00
Ronni Skansing
451b3800cd add proxy remove header by regex support
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 14:38:09 +01:00
Ronni Skansing
d187cbb2e7 add support for {{.Origin}} in proxy response handler
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 12:17:26 +01:00
Ronni Skansing
5aa57a0c66 fix proxy goquery (dom engine) only on html content type
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 11:26:45 +01:00
Ronni Skansing
28d448c15f Added support for recipient variables in proxies
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 10:39:50 +01:00
Ronni Skansing
b59b17dca7 fix rewrite_urls not working in some cases
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-27 21:44:22 +01:00
Ronni Skansing
a944422245 testing
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-27 20:59:50 +01:00
Ronni Skansing
39b3a1214a fix proxy capture on 302
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-19 16:31:14 +01:00
Ronni Skansing
e90dc9081f fix rewrite query param bug
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-02 20:31:29 +01:00
Ronni Skansing
672934cb6f fix tighten new proxy capture engine
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 22:32:43 +01:00
Ronni Skansing
e0cff01796 add support for proxy schema http and ports in proxy start URL
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 21:46:49 +01:00
Ronni Skansing
d35d41732b Added new from for capture for json, formdata, urlencoded. \nAdded support for multiple values in capture find.
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 20:19:59 +01:00
Ronni Skansing
6c3c695941 Added support for random recipient variable
Random recipient can not be the recipient
Added support for variables in email subject

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 00:41:14 +01:00
Ronni Skansing
a9317da42b ensure hosts are sorted by length
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-23 12:59:55 +01:00
Ronni Skansing
4754e8bf6c Moved MITM cookie to top level of landing URL to support wider capturing.
Use surf http client only.
various bugs with switching to surf

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-23 12:18:24 +01:00
Ronni Skansing
2d5f5a4216 custom obfuscation
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-22 12:10:49 +01:00
Ronni Skansing
70c7b6203d add option to add data to webhook events
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 20:50:50 +01:00
Ronni Skansing
68d3466efb Merge branch 'fix-missing-webhooks-points' into develop 2025-11-14 18:09:30 +01:00
Ronni Skansing
ead06b63b0 fix remove early session complete mark
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 18:05:56 +01:00
Ronni Skansing
396bbb29ab adding wehook missing calls
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 17:01:27 +01:00
Ronni Skansing
66622e0753 fix add global rewrite rules to requests without mitm session
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 12:49:03 +01:00
Ronni Skansing
735f50de6c fix bad encode handling
fix unneeded reencoding

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 12:47:50 +01:00
Ronni Skansing
723ff5592b fix cookie capture event sometimes output before all captures were completed
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 01:51:31 +01:00
Ronni Skansing
73efa9e341 added synthetic read events for when visiting a landing page and having no previous read email event
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-12 21:12:25 +01:00
Ronni Skansing
fa1174e06c add option to save additional data
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-11 19:47:19 +01:00
Ronni Skansing
8a5de77b28 add deny page visit event
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-10 19:04:22 +01:00
Ronni Skansing
9c5acbed90 Add geo IP checking 2025-11-09 12:22:39 +01:00
Ronni Skansing
acb7a4a8ee add support for proxy socks5
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-09 10:03:11 +01:00
Ronni Skansing
99b7244962 fix proxy filtering
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-06 23:08:25 +01:00
Ronni Skansing
acdff38814 added impersonate
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-06 21:59:22 +01:00
Ronni Skansing
691cff9659 ip filtering becomes filtering with ja4 and cidrs
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-05 21:10:33 +01:00
Ronni Skansing
4ce58fb235 extract proxy session management and add clear proxy sessions when updating a proxy config
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-04 21:42:31 +01:00
Ronni Skansing
101126e54d fix mitm page should not be available when campaign closed
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-03 20:36:08 +01:00
Ronni Skansing
ff2f2a36c7 Added options for campaign obfuscation
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-01 22:53:43 +01:00
Ronni Skansing
495f3e0b0a fix apply proxy rules only to correct hosts
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-25 01:53:05 +02:00
Ronni Skansing
2920bd0a98 fix missing proxy logic for requests without sessions
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-25 01:15:44 +02:00
Ronni Skansing
91519a0cd3 fix proxy host response matching on any domain
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-24 16:24:02 +02:00
Ronni Skansing
8aedc3dbef remove redudant queries in proxy
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-24 16:07:13 +02:00
Ronni Skansing
9014fb6477 render page can use template variables. Added panic debug info
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-24 15:31:27 +02:00
Ronni Skansing
dda9a66437 Update proxy yaml completions
Added rewrite-url directive
Access directive is 404 and private by default
Fixed missing data capture
Fix missing data capture
MITM campaign now use campaign template domain for all pages exception
mitm page and evasion page.
Fix always start new session on initial page visit
Use the random mitm cookie name
Use proxy target URL for mitm page
2025-10-24 14:43:09 +02:00
Ronni Skansing
d6a717ebfa change access directive and add management for proxy allow list
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-23 12:55:51 +02:00