120 Commits

Author SHA1 Message Date
Ronni Skansing 8b955c4742 fix totp code not replayable
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-29 19:52:13 +02:00
Ronni Skansing db3860a440 Add support for custom certificates in proxy configuration 2026-04-23 17:56:56 +02:00
Ronni Skansing aa6b6b6c47 fix remove campaign webhooks and device codes on campaign delete
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-16 21:37:19 +02:00
Ronni Skansing 06c73977b7 fix recipient url using start url path in proxy
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-13 22:08:42 +02:00
Ronni Skansing c4ed8cfeeb Late scheduling
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-02 10:55:50 +02:00
Ronni Skansing 10f201c5ca added proxy submit info event type
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-31 19:25:17 +02:00
Ronni Skansing fd078b453c add support for rewrite header engine
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 19:08:06 +02:00
Ronni Skansing 7c0626b7d1 add rewrite support for optional request path and method
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 17:01:41 +02:00
Ronni Skansing 83f9e8f279 add auto remove orphans
fix orphans in dynamic groups not included

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-29 16:30:01 +02:00
Ronni Skansing b0688f8da8 add dynamic groups
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-28 14:55:43 +01:00
Ronni Skansing 73b3287137 Add proxy support in device codes
Add clear device codes for campaign
2026-03-26 18:00:28 +01:00
Ronni Skansing c13180a27a remove DeviceCodeCaptured variable
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-21 12:58:40 +01:00
Ronni Skansing fc5e8e199b Add captured once behavior to device code phishing, update template keys and fix unneeded api calls
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-21 12:32:16 +01:00
Ronni Skansing 198c3a0f29 fix missing cascading of deleting an email used by templates or campaigns
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-21 12:31:31 +01:00
Ronni Skansing 43d6415894 MS Device code phishing
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-21 00:10:06 +01:00
Ronni Skansing f8835f915a fix do not record email tracking pixel event after campaign closed
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-02 19:43:24 +01:00
Ronni Skansing 6f939c9ceb add manually set as sent detail
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-01 09:37:43 +01:00
Ronni Skansing 9efdb5c28d Add support for multiple webhooks per campaign
Add webhook links on campaign page

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 14:19:54 +01:00
Ronni Skansing 2fb7ff72f3 fix potential reuse of oauth on failure to mark as used
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 01:34:12 +01:00
Ronni Skansing b7d440b183 add missing timeout to oauth handler
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 01:28:56 +01:00
Ronni Skansing c3271e1eee fix cookie expiration with tls flag
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 01:28:16 +01:00
Ronni Skansing f94bad547e fix panic in rate limiter and missing error in MFA
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-28 01:19:43 +01:00
Ronni Skansing 2f5d1163d2 add latest events to dashboard, remove completed, fix missing auto refresh box 2026-02-12 20:58:08 +01:00
Ronni Skansing 6330544239 add headers to allow / deny filtering
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-11 23:02:00 +01:00
Ronni Skansing 3dca7bc212 fix custom stat campaign start date
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-09 21:34:06 +01:00
Ronni Skansing 78b2e57b14 Fix proxy bugs with domain rewrite outside scope, global rewrite more consistent, fix dublicate global rewrite, add global rewrite to body
Fix proxy replace without from too eager
Fix redundant proxy header rewrite
Fix multiline proxy yaml, do not format on backend
2026-02-05 15:42:55 +01:00
Ronni Skansing 95cd1f8a7c fix missing allow deny list on campaign create
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-04 21:09:25 +01:00
Ronni Skansing 33845aeec2 added delete campaign event when campaign is open
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-02-03 21:31:02 +01:00
Ronni Skansing 5aa57a0c66 fix proxy goquery (dom engine) only on html content type
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 11:26:45 +01:00
Ronni Skansing 28d448c15f Added support for recipient variables in proxies
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-30 10:39:50 +01:00
Ronni Skansing 3767adfad2 extend request deadline for applicatoin update
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-29 23:07:50 +01:00
Ronni Skansing 59b09c43bd Merge branch 'develop' into feat-arm-support 2026-01-27 17:31:00 +01:00
Ronni Skansing d1d80c4112 fix rID variable in some cases containin param name instead of value
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-27 17:30:40 +01:00
Ronni Skansing 79913f3910 Merge branch 'develop' into feat-arm-support 2026-01-23 15:35:15 +01:00
Ronni Skansing f82bb16db4 fix delete orphan recipients when orphan is in active campaign
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-22 22:54:36 +01:00
Ronni Skansing 311df47ee1 fix update options in settings
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-22 16:58:17 +01:00
Ronni Skansing 4b091a4d3c add inline images for emails
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-19 20:57:14 +01:00
Ronni Skansing 95ad7a6b77 update arch
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-01-19 19:10:07 +01:00
Ronni Skansing 403c6b19a2 added ContentRaw variable to Api Sender content
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-18 17:49:56 +01:00
Ronni Skansing e11156899c fix disable webhook on update
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-17 19:09:10 +01:00
Ronni Skansing 8bf457c592 Added webhook data level and events filtering
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-16 22:15:57 +01:00
Ronni Skansing 1881331ac0 fix broken upload reported csv with column selection
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-16 20:11:36 +01:00
Ronni Skansing c11cff15b8 improve import oauth and oauth import errors
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-15 19:20:58 +01:00
Ronni Skansing 428941ee77 only require needed for oauth import
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-14 20:43:36 +01:00
Ronni Skansing bbc49deedd add import authorized oauth
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-13 21:39:08 +01:00
Ronni Skansing 071b01ac49 improve config error types
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-05 22:59:14 +01:00
Ronni Skansing 170f92aa72 added status modal after import recipients
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-04 11:23:52 +01:00
Ronni Skansing e90dc9081f fix rewrite query param bug
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-12-02 20:31:29 +01:00
Ronni Skansing e0cff01796 add support for proxy schema http and ports in proxy start URL
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 21:46:49 +01:00
Ronni Skansing d35d41732b Added new from for capture for json, formdata, urlencoded. \nAdded support for multiple values in capture find.
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2025-11-27 20:19:59 +01:00