61ecc4c505
SCIM provisioning for companies with disabled recipient handling
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-06-11 20:34:13 +02:00
bff948c760
added trusted ip forward header to phishing server
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-05-27 22:36:10 +02:00
9bd048e4bf
Remote Browser Feature
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-05-24 09:40:48 +02:00
fda18732f8
apply rewrite_urls rules when redirecting to proxy pages
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-04-16 21:08:43 +02:00
73b3287137
Add proxy support in device codes
...
Add clear device codes for campaign
2026-03-26 18:00:28 +01:00
43d6415894
MS Device code phishing
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-03-21 00:10:06 +01:00
9efdb5c28d
Add support for multiple webhooks per campaign
...
Add webhook links on campaign page
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-02-28 14:19:54 +01:00
6330544239
add headers to allow / deny filtering
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2026-02-11 23:02:00 +01:00
2e9227900d
add submit capture for PUT, PATCH and more content types
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-12-04 19:56:34 +01:00
6c3c695941
Added support for random recipient variable
...
Random recipient can not be the recipient
Added support for variables in email subject
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-27 00:41:14 +01:00
2d5f5a4216
custom obfuscation
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-22 12:10:49 +01:00
70c7b6203d
add option to add data to webhook events
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-14 20:50:50 +01:00
396bbb29ab
adding wehook missing calls
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-14 17:01:27 +01:00
73efa9e341
added synthetic read events for when visiting a landing page and having no previous read email event
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-12 21:12:25 +01:00
fa1174e06c
add option to save additional data
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-11 19:47:19 +01:00
8a5de77b28
add deny page visit event
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-10 19:04:22 +01:00
9c5acbed90
Add geo IP checking
2025-11-09 12:22:39 +01:00
99b7244962
fix proxy filtering
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-06 23:08:25 +01:00
691cff9659
ip filtering becomes filtering with ja4 and cidrs
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-05 21:10:33 +01:00
ff5921ec02
fix setting ja4
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-05 20:20:40 +01:00
74a681b275
ja4 fingerprinting added to upstream request
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-05 20:13:53 +01:00
4ce58fb235
extract proxy session management and add clear proxy sessions when updating a proxy config
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-04 21:42:31 +01:00
ff2f2a36c7
Added options for campaign obfuscation
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-11-01 22:53:43 +01:00
9014fb6477
render page can use template variables. Added panic debug info
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-24 15:31:27 +02:00
dda9a66437
Update proxy yaml completions
...
Added rewrite-url directive
Access directive is 404 and private by default
Fixed missing data capture
Fix missing data capture
MITM campaign now use campaign template domain for all pages exception
mitm page and evasion page.
Fix always start new session on initial page visit
Use the random mitm cookie name
Use proxy target URL for mitm page
2025-10-24 14:43:09 +02:00
d6a717ebfa
change access directive and add management for proxy allow list
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-23 12:55:51 +02:00
26880e36cf
Evasion page implementation.
...
Fix ip filtering.
Support for ip filter in proxies
2025-10-19 13:44:44 +02:00
c64f5a7dec
fix skip campaign template domain when mitm domain is first page
...
fix align extract IP on phishing server
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-11 16:54:10 +02:00
16bbcd3b81
replace securejoin with os.openroot
...
Signed-off-by: Ronni Skansing <rskansing@gmail.com >
2025-10-04 18:09:12 +02:00
fc0a14303c
Proxy MITM
2025-09-30 18:59:04 +02:00
1aab0e499c
change to text/template
2025-09-19 00:29:31 +02:00
11cf01f08e
Initial open source release
2025-08-21 16:14:09 +02:00
Ronni Skansing