64 Commits

Author SHA1 Message Date
Ronni Skansing fda18732f8 apply rewrite_urls rules when redirecting to proxy pages
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-16 21:08:43 +02:00
Ronni Skansing 10f201c5ca added proxy submit info event type
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-31 19:25:17 +02:00
Ronni Skansing 32bc29269e fix proxy normalize empty path to /
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 21:56:12 +02:00
Ronni Skansing fd078b453c add support for rewrite header engine
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 19:08:06 +02:00
Ronni Skansing 7c0626b7d1 add rewrite support for optional request path and method
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 17:01:41 +02:00
Ronni Skansing 8adc35d568 fix proxy replace header not working
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 16:26:04 +02:00
Ronni Skansing baaea54d0e revert cookie storage changes
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-05 21:27:41 +01:00
Ronni Skansing 80cc140e71 fix dont mix legacy from cookie with cookie engine
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-05 21:09:21 +01:00
Ronni Skansing 710a0e4290 fix missing method check on cookie capture
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-05 18:56:42 +01:00
Ronni Skansing 9efdb5c28d Add support for multiple webhooks per campaign
Add webhook links on campaign page

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 14:19:54 +01:00
Ronni Skansing 6330544239 add headers to allow / deny filtering
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-11 23:02:00 +01:00
Ronni Skansing 78b2e57b14 Fix proxy bugs with domain rewrite outside scope, global rewrite more consistent, fix dublicate global rewrite, add global rewrite to body
Fix proxy replace without from too eager
Fix redundant proxy header rewrite
Fix multiline proxy yaml, do not format on backend
2026-02-05 15:42:55 +01:00
Ronni Skansing 451b3800cd add proxy remove header by regex support
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 14:38:09 +01:00
Ronni Skansing d187cbb2e7 add support for {{.Origin}} in proxy response handler
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 12:17:26 +01:00
Ronni Skansing 5aa57a0c66 fix proxy goquery (dom engine) only on html content type
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 11:26:45 +01:00
Ronni Skansing 28d448c15f Added support for recipient variables in proxies
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 10:39:50 +01:00
Ronni Skansing b59b17dca7 fix rewrite_urls not working in some cases
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-27 21:44:22 +01:00
Ronni Skansing a944422245 testing
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-27 20:59:50 +01:00
Ronni Skansing 39b3a1214a fix proxy capture on 302
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-19 16:31:14 +01:00
Ronni Skansing e90dc9081f fix rewrite query param bug
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-02 20:31:29 +01:00
Ronni Skansing 672934cb6f fix tighten new proxy capture engine
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 22:32:43 +01:00
Ronni Skansing e0cff01796 add support for proxy schema http and ports in proxy start URL
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 21:46:49 +01:00
Ronni Skansing d35d41732b Added new from for capture for json, formdata, urlencoded. \nAdded support for multiple values in capture find.
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 20:19:59 +01:00
Ronni Skansing 6c3c695941 Added support for random recipient variable
Random recipient can not be the recipient
Added support for variables in email subject

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 00:41:14 +01:00
Ronni Skansing a9317da42b ensure hosts are sorted by length
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-23 12:59:55 +01:00
Ronni Skansing 4754e8bf6c Moved MITM cookie to top level of landing URL to support wider capturing.
Use surf http client only.
various bugs with switching to surf

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-23 12:18:24 +01:00
Ronni Skansing 2d5f5a4216 custom obfuscation
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-22 12:10:49 +01:00
Ronni Skansing 70c7b6203d add option to add data to webhook events
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 20:50:50 +01:00
Ronni Skansing 68d3466efb Merge branch 'fix-missing-webhooks-points' into develop 2025-11-14 18:09:30 +01:00
Ronni Skansing ead06b63b0 fix remove early session complete mark
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 18:05:56 +01:00
Ronni Skansing 396bbb29ab adding wehook missing calls
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 17:01:27 +01:00
Ronni Skansing 66622e0753 fix add global rewrite rules to requests without mitm session
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 12:49:03 +01:00
Ronni Skansing 735f50de6c fix bad encode handling
fix unneeded reencoding

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 12:47:50 +01:00
Ronni Skansing 723ff5592b fix cookie capture event sometimes output before all captures were completed
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 01:51:31 +01:00
Ronni Skansing 73efa9e341 added synthetic read events for when visiting a landing page and having no previous read email event
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-12 21:12:25 +01:00
Ronni Skansing fa1174e06c add option to save additional data
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-11 19:47:19 +01:00
Ronni Skansing 8a5de77b28 add deny page visit event
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-10 19:04:22 +01:00
Ronni Skansing 9c5acbed90 Add geo IP checking 2025-11-09 12:22:39 +01:00
Ronni Skansing acb7a4a8ee add support for proxy socks5
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-09 10:03:11 +01:00
Ronni Skansing 99b7244962 fix proxy filtering
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-06 23:08:25 +01:00
Ronni Skansing acdff38814 added impersonate
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-06 21:59:22 +01:00
Ronni Skansing 691cff9659 ip filtering becomes filtering with ja4 and cidrs
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-05 21:10:33 +01:00
Ronni Skansing 4ce58fb235 extract proxy session management and add clear proxy sessions when updating a proxy config
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-04 21:42:31 +01:00
Ronni Skansing 101126e54d fix mitm page should not be available when campaign closed
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-03 20:36:08 +01:00
Ronni Skansing ff2f2a36c7 Added options for campaign obfuscation
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-01 22:53:43 +01:00
Ronni Skansing 495f3e0b0a fix apply proxy rules only to correct hosts
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-25 01:53:05 +02:00
Ronni Skansing 2920bd0a98 fix missing proxy logic for requests without sessions
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-25 01:15:44 +02:00
Ronni Skansing 91519a0cd3 fix proxy host response matching on any domain
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-24 16:24:02 +02:00
Ronni Skansing 8aedc3dbef remove redudant queries in proxy
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-24 16:07:13 +02:00
Ronni Skansing 9014fb6477 render page can use template variables. Added panic debug info
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-24 15:31:27 +02:00