53 Commits

Author SHA1 Message Date
Ronni Skansing
6330544239 add headers to allow / deny filtering
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-11 23:02:00 +01:00
Ronni Skansing
78b2e57b14 Fix proxy bugs with domain rewrite outside scope, global rewrite more consistent, fix dublicate global rewrite, add global rewrite to body
Fix proxy replace without from too eager
Fix redundant proxy header rewrite
Fix multiline proxy yaml, do not format on backend
2026-02-05 15:42:55 +01:00
Ronni Skansing
451b3800cd add proxy remove header by regex support
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 14:38:09 +01:00
Ronni Skansing
d187cbb2e7 add support for {{.Origin}} in proxy response handler
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 12:17:26 +01:00
Ronni Skansing
5aa57a0c66 fix proxy goquery (dom engine) only on html content type
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 11:26:45 +01:00
Ronni Skansing
28d448c15f Added support for recipient variables in proxies
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 10:39:50 +01:00
Ronni Skansing
b59b17dca7 fix rewrite_urls not working in some cases
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-27 21:44:22 +01:00
Ronni Skansing
a944422245 testing
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-27 20:59:50 +01:00
Ronni Skansing
39b3a1214a fix proxy capture on 302
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-19 16:31:14 +01:00
Ronni Skansing
e90dc9081f fix rewrite query param bug
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-02 20:31:29 +01:00
Ronni Skansing
672934cb6f fix tighten new proxy capture engine
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 22:32:43 +01:00
Ronni Skansing
e0cff01796 add support for proxy schema http and ports in proxy start URL
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 21:46:49 +01:00
Ronni Skansing
d35d41732b Added new from for capture for json, formdata, urlencoded. \nAdded support for multiple values in capture find.
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 20:19:59 +01:00
Ronni Skansing
6c3c695941 Added support for random recipient variable
Random recipient can not be the recipient
Added support for variables in email subject

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 00:41:14 +01:00
Ronni Skansing
a9317da42b ensure hosts are sorted by length
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-23 12:59:55 +01:00
Ronni Skansing
4754e8bf6c Moved MITM cookie to top level of landing URL to support wider capturing.
Use surf http client only.
various bugs with switching to surf

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-23 12:18:24 +01:00
Ronni Skansing
2d5f5a4216 custom obfuscation
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-22 12:10:49 +01:00
Ronni Skansing
70c7b6203d add option to add data to webhook events
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 20:50:50 +01:00
Ronni Skansing
68d3466efb Merge branch 'fix-missing-webhooks-points' into develop 2025-11-14 18:09:30 +01:00
Ronni Skansing
ead06b63b0 fix remove early session complete mark
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 18:05:56 +01:00
Ronni Skansing
396bbb29ab adding wehook missing calls
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 17:01:27 +01:00
Ronni Skansing
66622e0753 fix add global rewrite rules to requests without mitm session
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 12:49:03 +01:00
Ronni Skansing
735f50de6c fix bad encode handling
fix unneeded reencoding

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 12:47:50 +01:00
Ronni Skansing
723ff5592b fix cookie capture event sometimes output before all captures were completed
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-14 01:51:31 +01:00
Ronni Skansing
73efa9e341 added synthetic read events for when visiting a landing page and having no previous read email event
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-12 21:12:25 +01:00
Ronni Skansing
fa1174e06c add option to save additional data
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-11 19:47:19 +01:00
Ronni Skansing
8a5de77b28 add deny page visit event
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-10 19:04:22 +01:00
Ronni Skansing
9c5acbed90 Add geo IP checking 2025-11-09 12:22:39 +01:00
Ronni Skansing
99b7244962 fix proxy filtering
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-06 23:08:25 +01:00
Ronni Skansing
acdff38814 added impersonate
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-06 21:59:22 +01:00
Ronni Skansing
691cff9659 ip filtering becomes filtering with ja4 and cidrs
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-05 21:10:33 +01:00
Ronni Skansing
4ce58fb235 extract proxy session management and add clear proxy sessions when updating a proxy config
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-04 21:42:31 +01:00
Ronni Skansing
101126e54d fix mitm page should not be available when campaign closed
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-03 20:36:08 +01:00
Ronni Skansing
ff2f2a36c7 Added options for campaign obfuscation
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-01 22:53:43 +01:00
Ronni Skansing
495f3e0b0a fix apply proxy rules only to correct hosts
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-25 01:53:05 +02:00
Ronni Skansing
2920bd0a98 fix missing proxy logic for requests without sessions
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-25 01:15:44 +02:00
Ronni Skansing
91519a0cd3 fix proxy host response matching on any domain
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-24 16:24:02 +02:00
Ronni Skansing
8aedc3dbef remove redudant queries in proxy
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-24 16:07:13 +02:00
Ronni Skansing
9014fb6477 render page can use template variables. Added panic debug info
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-24 15:31:27 +02:00
Ronni Skansing
dda9a66437 Update proxy yaml completions
Added rewrite-url directive
Access directive is 404 and private by default
Fixed missing data capture
Fix missing data capture
MITM campaign now use campaign template domain for all pages exception
mitm page and evasion page.
Fix always start new session on initial page visit
Use the random mitm cookie name
Use proxy target URL for mitm page
2025-10-24 14:43:09 +02:00
Ronni Skansing
d6a717ebfa change access directive and add management for proxy allow list
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-23 12:55:51 +02:00
Ronni Skansing
847a3552b1 change access directive and default proxy acccess handling
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-20 21:38:52 +02:00
Ronni Skansing
26880e36cf Evasion page implementation.
Fix ip filtering.
Support for ip filter in proxies
2025-10-19 13:44:44 +02:00
Ronni Skansing
34d619f85e merge develop - fix conflicts
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-16 11:27:22 +02:00
Ronni Skansing
7d8e53168c implement goproxy for dom rewrite dom
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-16 11:02:55 +02:00
Ronni Skansing
2cd428c416 add proxy response directive
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-16 00:26:48 +02:00
Ronni Skansing
ee406aeecf nil checks
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-15 22:44:35 +02:00
Ronni Skansing
8661144493 fix proxy domain comparison ordering
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-13 21:31:35 +02:00
Ronni Skansing
c64f5a7dec fix skip campaign template domain when mitm domain is first page
fix align extract IP on phishing server

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-11 16:54:10 +02:00
Ronni Skansing
93708cef17 Access control for proxy
Vim suggestions for proxy yaml

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-10-07 19:14:38 +02:00