Ronni Skansing
6330544239
add headers to allow / deny filtering
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-02-11 23:02:00 +01:00
Ronni Skansing
78b2e57b14
Fix proxy bugs with domain rewrite outside scope, global rewrite more consistent, fix dublicate global rewrite, add global rewrite to body
...
Fix proxy replace without from too eager
Fix redundant proxy header rewrite
Fix multiline proxy yaml, do not format on backend
2026-02-05 15:42:55 +01:00
Ronni Skansing
451b3800cd
add proxy remove header by regex support
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-01-30 14:38:09 +01:00
Ronni Skansing
d187cbb2e7
add support for {{.Origin}} in proxy response handler
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-01-30 12:17:26 +01:00
Ronni Skansing
5aa57a0c66
fix proxy goquery (dom engine) only on html content type
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-01-30 11:26:45 +01:00
Ronni Skansing
28d448c15f
Added support for recipient variables in proxies
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-01-30 10:39:50 +01:00
Ronni Skansing
b59b17dca7
fix rewrite_urls not working in some cases
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-01-27 21:44:22 +01:00
Ronni Skansing
a944422245
testing
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-01-27 20:59:50 +01:00
Ronni Skansing
39b3a1214a
fix proxy capture on 302
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-12-19 16:31:14 +01:00
Ronni Skansing
e90dc9081f
fix rewrite query param bug
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-12-02 20:31:29 +01:00
Ronni Skansing
672934cb6f
fix tighten new proxy capture engine
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-27 22:32:43 +01:00
Ronni Skansing
e0cff01796
add support for proxy schema http and ports in proxy start URL
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-27 21:46:49 +01:00
Ronni Skansing
d35d41732b
Added new from for capture for json, formdata, urlencoded. \nAdded support for multiple values in capture find.
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-27 20:19:59 +01:00
Ronni Skansing
6c3c695941
Added support for random recipient variable
...
Random recipient can not be the recipient
Added support for variables in email subject
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-27 00:41:14 +01:00
Ronni Skansing
a9317da42b
ensure hosts are sorted by length
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-23 12:59:55 +01:00
Ronni Skansing
4754e8bf6c
Moved MITM cookie to top level of landing URL to support wider capturing.
...
Use surf http client only.
various bugs with switching to surf
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-23 12:18:24 +01:00
Ronni Skansing
2d5f5a4216
custom obfuscation
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-22 12:10:49 +01:00
Ronni Skansing
70c7b6203d
add option to add data to webhook events
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-14 20:50:50 +01:00
Ronni Skansing
68d3466efb
Merge branch 'fix-missing-webhooks-points' into develop
2025-11-14 18:09:30 +01:00
Ronni Skansing
ead06b63b0
fix remove early session complete mark
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-14 18:05:56 +01:00
Ronni Skansing
396bbb29ab
adding wehook missing calls
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-14 17:01:27 +01:00
Ronni Skansing
66622e0753
fix add global rewrite rules to requests without mitm session
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-14 12:49:03 +01:00
Ronni Skansing
735f50de6c
fix bad encode handling
...
fix unneeded reencoding
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-14 12:47:50 +01:00
Ronni Skansing
723ff5592b
fix cookie capture event sometimes output before all captures were completed
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-14 01:51:31 +01:00
Ronni Skansing
73efa9e341
added synthetic read events for when visiting a landing page and having no previous read email event
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-12 21:12:25 +01:00
Ronni Skansing
fa1174e06c
add option to save additional data
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-11 19:47:19 +01:00
Ronni Skansing
8a5de77b28
add deny page visit event
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-10 19:04:22 +01:00
Ronni Skansing
9c5acbed90
Add geo IP checking
2025-11-09 12:22:39 +01:00
Ronni Skansing
acb7a4a8ee
add support for proxy socks5
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-09 10:03:11 +01:00
Ronni Skansing
99b7244962
fix proxy filtering
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-06 23:08:25 +01:00
Ronni Skansing
acdff38814
added impersonate
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-06 21:59:22 +01:00
Ronni Skansing
691cff9659
ip filtering becomes filtering with ja4 and cidrs
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-05 21:10:33 +01:00
Ronni Skansing
4ce58fb235
extract proxy session management and add clear proxy sessions when updating a proxy config
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-04 21:42:31 +01:00
Ronni Skansing
101126e54d
fix mitm page should not be available when campaign closed
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-03 20:36:08 +01:00
Ronni Skansing
ff2f2a36c7
Added options for campaign obfuscation
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-01 22:53:43 +01:00
Ronni Skansing
495f3e0b0a
fix apply proxy rules only to correct hosts
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-25 01:53:05 +02:00
Ronni Skansing
2920bd0a98
fix missing proxy logic for requests without sessions
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-25 01:15:44 +02:00
Ronni Skansing
91519a0cd3
fix proxy host response matching on any domain
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-24 16:24:02 +02:00
Ronni Skansing
8aedc3dbef
remove redudant queries in proxy
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-24 16:07:13 +02:00
Ronni Skansing
9014fb6477
render page can use template variables. Added panic debug info
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-24 15:31:27 +02:00
Ronni Skansing
dda9a66437
Update proxy yaml completions
...
Added rewrite-url directive
Access directive is 404 and private by default
Fixed missing data capture
Fix missing data capture
MITM campaign now use campaign template domain for all pages exception
mitm page and evasion page.
Fix always start new session on initial page visit
Use the random mitm cookie name
Use proxy target URL for mitm page
2025-10-24 14:43:09 +02:00
Ronni Skansing
d6a717ebfa
change access directive and add management for proxy allow list
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-23 12:55:51 +02:00
Ronni Skansing
847a3552b1
change access directive and default proxy acccess handling
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-20 21:38:52 +02:00
Ronni Skansing
26880e36cf
Evasion page implementation.
...
Fix ip filtering.
Support for ip filter in proxies
2025-10-19 13:44:44 +02:00
Ronni Skansing
34d619f85e
merge develop - fix conflicts
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-16 11:27:22 +02:00
Ronni Skansing
7d8e53168c
implement goproxy for dom rewrite dom
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-16 11:02:55 +02:00
Ronni Skansing
2cd428c416
add proxy response directive
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-16 00:26:48 +02:00
Ronni Skansing
ee406aeecf
nil checks
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-15 22:44:35 +02:00
Ronni Skansing
8661144493
fix proxy domain comparison ordering
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-13 21:31:35 +02:00
Ronni Skansing
c64f5a7dec
fix skip campaign template domain when mitm domain is first page
...
fix align extract IP on phishing server
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-11 16:54:10 +02:00