Gophish-Windows-Setup-Guide - A hands-on project using GoPhish to demonstrate h

项目说明

<di="center">

<!-- My Logo -->
<img src=" height="50%" width="80%" alt="Gophish Logo"/>

Gophish-Windows-Setup-Guide-By-Elizabeth-Ekedoro

</div>

---

⚠️ Disclaimer

> This guide is intended for authorized security testing and security awareness or educational purposes only.
> Elizabeth Ekedoro is not responsible for any misuse, unauthorized activity, or damage resulting from the use of <br/> the information provided in this guide.
> Using this tool against any indi or organization without explicit written permission is illegal.
> Unauthorized phishing campaigns may indi rights, organizational policies and applicable laws.

<h2>What is Gophish</h2>
Gophish is a free, open-source phishing simulation framework designed to help security professionals conduct <br/> realistic phishing awareness campaigns. It enables you to:

Create and send simulated phishing emails.

Measure how susceptible users are to phishing attacks.

Identify users who require additional security awareness training.

E the effecti of organizational security awareness programs.

<h2>Requirements</h2>
Before getting started, ensure you have the following:

A Windows computer.

Internet connection.

A Gmail account.

2FA enabled for the Gmail account.

Administrator access on your computer.

<br />
<h2>Project walk-through:</h2>

<details>
<summary><b>Step 1: Installing Gophish</b></summary>
<br />
<p align="center">
Visit the Gophish website -->
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br/>
<br/>

<p align="center">
Click >Download: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
Scroll down to the Assets section and select the Windows ZIP file: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
Choose a folder where you want to save the ZIP file and click >Save: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
After the download completes, na to the Gophish zip file, right-click, and select >Extract All: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
Choose your preferred extraction location and click >Extract: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
Wait until extraction is complete: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/> <br/>
<p align="center">
The extracted folder will contain the Gophish executable and all required files.
<br />
<br />

</details>

<!-- Step 2 -->
<details>
<summary><b> Step 2: Configuring Gophish</b></summary>
<br/>

<p align="center">
Open the extracted folder / Unzipped File: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
Right-click the gophish.exe file and select >Run as administrator: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
If Windows prompts you to allow the application through the firewall, click >Allow: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/> <br/>

<br />
<br />
<p align="center">
Once Gophish installs successfully, the terminal window will display the default administrator credentials: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />

Note down the following information: <br/>

Username: admin.

Password: Your unique 16-character generated password displayed in your terminal.

Gophish Server URL:

Copy and sa credentials in your Notepad or write them down.

<br />

Accessing the Gophish Interface/Platform <br/>
<p align="center">
Open your web browser and na to the gophish Server:
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />
<p align="center">
Since Gophish uses a self-signed certificate, your browser will display a security warning. Click >Ad:<br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
Select, >Proceed to 127.0.0.1 (unsafe):<br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/> <br/>
<p align="center">
This is expected because the server is running locally.
<br />
<br />

Logging Into Gophish <br/>

Enter the following: <br/>

Username: admin.

Password: Your unique 16-character generated password displayed your terminal.

<p align="center">
Click >Sign In:<br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />

<p align="center">
The first time you log in, Gophish will prompt you to reset your password. <br/> Choose a strong password and click >Sa:<br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/> <br/>

<br />
<p align="center">
After signing in successfully, you will see the Gophish dashboard.
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />

The left na pane contains the following sections: <br/>

Dashboard

Campaigns

Users & Groups

Email Templates

Landing Pages

Sending Profiles

Account Settings

User Management

Webhooks

<br/>
</details>

<!-- Step 3 -->

<details>
<summary><b> Step 3: Configuring Sending Profile</b></summary>
<br/>
<br />
A Sending Profile contains the SMTP settings Gophish uses to send phishing simulation emails. <br/>
<br />

<p align="center">
To create one: Click >Sending Profiles, then click >New Profile: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />

Configure the following:

<table style="border-collapse: collapse; width: 100%;">
<tr>
<th style="border: 1px solid #000; padding: 8px; text-align: left;">Field</th>
<th style="border: 1px solid #000; padding: 8px; text-align: left;">Description</th>
</tr>
<tr>
<td style="border: 1px solid #000; padding: 8px;">Profile Name</td>
<td style="border: 1px solid #000; padding: 8px;">Give your profile a descriptive name, example: Phishing Simulation</td>
</tr>
<tr>
<td style="border: 1px solid #000; padding: 8px;">Interface Type</td>
<td style="border: 1px solid #000; padding: 8px;">This is selected by default.</td>
</tr>
<tr>
<td style="border: 1px solid #000; padding: 8px;">SMTP From</td>
<td style="border: 1px solid #000; padding: 8px;">Enter the email address that will appear as the sender, example: </td>
</tr>
<tr>
<td style="border: 1px solid #000; padding: 8px;">Host</td>
<td style="border: 1px solid #000; padding: 8px;">For Gmail SMTP, use this: "smtp.gmail.com:465". If you test and it does not work, try this: "smtp.gmail.com:587" </td>
</tr>
<tr>
<td style="border: 1px solid #000; padding: 8px;">Username</td>
<td style="border: 1px solid #000; padding: 8px;">Enter the same Gmail address used in the "SMTP From" field, example: </td>
</tr>
<tr>
<td style="border: 1px solid #000; padding: 8px;">Password</td>
<td style="border: 1px solid #000; padding: 8px;">Do not use your normal Gmail password (It will not work). Instead, <br/>
Click <a href=" target="_blank">Here</a> for a quick step-by-step guide to generate your App Password.
</tr>
</tr>
</table>
<br/>
<p align="center">
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />

<p align="center">
After creating your App password, paste the App Password into the Password field.<br/>
Enable >Ignore Certificate Errors, and lea else as default <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />

<br/>
<br/>

Testing the Sending Profile Configuration

<p align="center">
To test your configurations so far: Click > Send Test Email: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />

<p align="center">
Input your details and, click > Send: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
Status so far: Email sent, as seen in the screenshot below. <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />

<p align="center">
If the email arri in your inbox, the SMTP configuration is working correctly. <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />

<p align="center">
Return to the Sending Profile page and click >Sa: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />.
<br />

<p align="center">
You ha configured your Sending Profile, and it is now ready for use. <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />.
<br />

</details>

<!-- Step 4 -->
<details>
<summary><b> Step 4: Setting up Landing Page</b></summary>
<br />
<br />
A landing page is the webpage a user is redirected to when they click the phishing link contained in an email. <br/>
<br />

<p align="center">
To create a landing page, click >Landing Pages on the left-hand pane, then click >New Page: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

Setup the following:
<table style="border-collapse: collapse; width: 100%;">
<tr>
<th style="border: 1px solid #000; padding: 8px; text-align: left;">Field</th>
<th style="border: 1px solid #000; padding: 8px; text-align: left;">Description</th>
</tr>
<tr>
<td style="border: 1px solid #000; padding: 8px;">Name</td>
<td style="border: 1px solid #000; padding: 8px;">Enter a name for your landing page. For this tutorial, I will use "Fake Instagram Simulation".</td>
</tr>

<tr>
<td style="border: 1px solid #000; padding: 8px;">HTML</td>
<td style="border: 1px solid #000; padding: 8px;">Click the HTML tab and use the HTML sample I ha on my GitHub. <br/>
To access the Landing Page Template, click <a href=" target="_blank">Here</a>
</tr>
</tr>
</table>

<p align="center">
Copy and paste the HTML code into the >HTML editor: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
To preview what the landing page looks like, click >Source: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

Select >Capture Submitted Data and >Capture Passwords: (This is to ensure the login credentials entered during the simulation will be captured, which you will see at the end of this exercise). <br/>

Redirect to: Enter the URL where you want the user to be redirected after submitting the page. eg <br/>

Finally, click >Save Page.

<br/>
<p align="center">
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
You ha set up your Landing Page, and it is now ready for use. <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

</details>

<!-- Step 5 -->
<details>
<summary><b> Step 5: Setting up Email Template</b></summary>
<br />
<br />
<p align="center">
An email template is the content of the email that will be sent to the target(s). You can either import an existing email or create one from scratch. <br/>
<br />

<p align="center">
To create an email template, click >Email Templates and then click >New Template: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

Setup the following:
<table style="border-collapse: collapse; width: 100%;">
<tr>
<th style="border: 1px solid #000; padding: 8px; text-align: left;">Field</th>
<th style="border: 1px solid #000; padding: 8px; text-align: left;">Description</th>
</tr>
<tr>
<td style="border: 1px solid #000; padding: 8px;">Name</td>
<td style="border: 1px solid #000; padding: 8px;">Enter a name for your template. For this tutorial, I will use "Fake Instagram Simulation." </td>
</tr>

</tr>
<tr>
<td style="border: 1px solid #000; padding: 8px;">En Sender</td>
<td style="border: 1px solid #000; padding: 8px;">Enter the sender's name and email address you want recipients to see. Since I am mimicking Instagram,<br/> for this tutorial I will use, "Instagram< >" </td>
</tr>
<tr>
<td style="border: 1px solid #000; padding: 8px;">Email Subject</td>
<td style="border: 1px solid #000; padding: 8px;">This is where you can create a sense of urgency. For this tutorial, I will use:<br/>
"Urgent: Suspicious Activity on Your Instagram Account" </td>
</tr>

<tr>
<td style="border: 1px solid #000; padding: 8px;">HTML</td>
<td style="border: 1px solid #000; padding: 8px;">Click the HTML tab and use the HTML sample I ha on my GitHub. <br/>
To access the Email Template, click <a href=" target="_blank">Here</a>
</tr>
</tr>
</table>

<p align="center">
Copy and paste the HTML code into the >HTML editor: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
To preview what the Email Template looks like, click >Source: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

Select >Add Tracking Image (To track when the email is opened): <br/>

Once you are satisfied with the template, click >Sa: <br/>

<br/>
<p align="center">
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
You ha setup your Landing Page and it is now ready for use. <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

</details>

<!-- Step 6 -->

<details>
<summary><b> Step 6: Setting Up Users & Groups</b></summary>
<br/>
<br/>

Users & Groups is where you create and organize the group of users you want to send the email to. <br/>
<br />

<p align="center">
To create a new group, click >Users & Groups and then click >New Group: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

Setup the following:
<table style="border-collapse: collapse; width: 100%;">
<tr>
<td style="border: 1px solid #000; padding: 8px;">Group Name</td>
<td style="border: 1px solid #000; padding: 8px;">Enter a name for your group. For this tutorial, I will use <br/>"Fake Instagram Simulation Group."
</td>
</tr>

<tr>
<td style="border: 1px solid #000; padding: 8px;">First Name</td>
<td style="border: 1px solid #000; padding: 8px;">
Enter the recipient's first name (e.g., Ekedoro)
</td>
</tr>

<tr>
<td style="border: 1px solid #000; padding: 8px;">Last Name</td>
<td style="border: 1px solid #000; padding: 8px;">
Enter the recipient's last name (e.g., Ekedoro)
</td>
</tr>

<tr>
<td style="border: 1px solid #000; padding: 8px;">Email</td>
<td style="border: 1px solid #000; padding: 8px;">
Enter the recipient's email (e.g. )
</td>
</tr>

<tr>
<td style="border: 1px solid #000; padding: 8px;">Position</td>
<td style="border: 1px solid #000; padding: 8px;">
Enter the recipient's position (e.g., CEO)
</td>
</tr>
</table>

Select >Add (After inputting the required details): <br/>

Once you are satisfied, click >Sa: <br/>

<p align="center">
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

📌 Note: Bulk Import Users

> If you ha users, for example, when conducting a simulation for an organization, you do not have to <br/> enter their information one person at a time. You can import a CSV file containing the users' information.
> For this tutorial, I am only sending the simulation to myself, so I added my details. <br/>
> Only use your own details unless you ha authorization or consent from an indi or organization.

Select >Add (If you have two or more personal email addresses, you can add them as well): <br/>

Once you are satisfied, click >Sa: <br/>

<p align="center">
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
You have set up Users & Groups, and it is now ready for use. <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br /
</details>

<!-- Step 7 -->

<details>
<summary><b> Step 7: Launching a Phishing Campaign</b></summary>
<br/>
<br/>
A campaign combines the email template, landing page, sending profile, and user group you configured in the previous steps. <br/>
<br />

<p align="center">
To create a new campaign, click >Campaigns and then click >New Campaign: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

Setup the following:
<table style="border-collapse: collapse; width: 100%;">
<tr>
<td style="border: 1px solid #000; padding: 8px;">Campaign Name</td>
<td style="border: 1px solid #000; padding: 8px;">Enter a name for your campaign. For this tutorial, I will use: <br/>"Fake Instagram Simulation Campaign"
</td>
</tr>

<tr>
<td style="border: 1px solid #000; padding: 8px;">Email Template</td>
<td style="border: 1px solid #000; padding: 8px;">Select "Fake Instagram Simulation", which is the Email Template created earlier.
</td>
</tr>

<tr>
<td style="border: 1px solid #000; padding: 8px;">Landing Page</td>
<td style="border: 1px solid #000; padding: 8px;">
Select "Fake Instagram Simulation", which is the Landing Page created earlier.
</td>
</tr>
</table>

<p align="center">
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />

<table style="border-collapse: collapse; width: 100%;">
<tr>
<td style="border: 1px solid #000; padding: 8px;">URL</td>
<td style="border: 1px solid #000; padding: 8px;">Enter your local IP address. To find it, open your PC’s Command Prompt, type <br/> "ipconfig" and copy the IPv4 Address into the URL field.
</td>
</tr>

<tr>
<td style="border: 1px solid #000; padding: 8px;">Launch Date</td>
<td style="border: 1px solid #000; padding: 8px;">This field is automatically populated. I recommend selecting the date on which <br/> you are carrying out the exercise.
</td>
</tr>

<tr>
<td style="border: 1px solid #000; padding: 8px;">Sending Profile</td>.
<td style="border: 1px solid #000; padding: 8px;">
Select "Phishing Simulation", which is the Sending Profile created earlier.
</td>
</tr>

<tr>
<td style="border: 1px solid #000; padding: 8px;">Groups</td>
<td style="border: 1px solid #000; padding: 8px;">
Select "Fake Instagram Simulation Group", which is the Group created earlier.
</td>
</tr>

<tr>
<td style="border: 1px solid #000; padding: 8px;">Send Test Email</td>
<td style="border: 1px solid #000; padding: 8px;">
Click "Send Test Email". (This sends a test email to your inbox so you can review <br/>the message and fix any issues before launching the simulation).
</td>
</tr>
</table

<br />
<p align="center">
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

Testing the Phishing Campaign

Before launching the campaign, we can test the configuration to make sure e is working correctly.

After clicking "Send Test Email": <br/>

Input your details and click >Send: <br/> (You can use your personal Gmail account or the Gmail account you created specifically for this exercise).

<p align="center">
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/> <br/>

<p align="center">
The email should now be successfully sent. Go to your Gmail inbox to that you received it.

<br />
<br />

<p align="center">
Here is the email that appears to be from Instagram, which confirms that the configuration is working correctly: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

Launching the Phishing Campaign
<br/>
<p align="center">
Return to the Gophish Campaign interface and click >Launch Campaign: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
A confirmation pop-up will appear asking whether you are sure you want to launch the campaign. Click >Launch: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
Another pop-up will confirm that your campaign has been scheduled. Click >OK: <br/>
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/> <br/>
🎉 You ha launched your phishing simulation campaign and can now view the results. <br/>
<br />
<br />
</details>

<br />

<!-- Step 8 -->

<details>
<summary><b> Step 8: the Phishing Campaign Result in Real-time</b></summary>

<br/>
<br/>
The Dashboard allows you to view the details and results of the campaigns you ha. <br/>
<br />

<p align="center">
To view the result, click >Dashboard: <br/>

Here, you will see information such as: <br/>

Email Sent

Email Opened

Clicked Link

Submitted Data

Email Reported

<p align="center">
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/>
<br />
<br />

<p align="center">
For this exercise, open the email you received in your inbox and click the phishing simulation link. <br/> Enter random credentials into the simulated login page:
<br/>

<p align="center">
Next, return to the Gophish Dashboard and refresh the page.
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/> <br/>
You should now see that the Dashboard has been updated, allowing you to view the results and details of the interaction with the simulated phishing campaign.
<br />
<br />

<p align="center">
It successfully captured the hypothetical data I submitted, demonstrating how a phishing simulation can <br/> show the type of information an attacker may attempt to collect.
<img src=" height="70%" width="70%" alt="Gophish Windows Setup Guide"/> <br/>

</details>
<br />
<br />

🎉 Congratulations!

You ha the phishing simulation and demonstrated how to configure, launch, and analyze a realistic phishing campaign in a controlled en. <br />
<br />

> Always conduct phishing simulations only with proper authorization and use them to strengthen security awareness and defensi.

<br />

Please contact me if you have any questions.
<br />

Video walkthrough

* Coming soon!

<di="center">

Made with so much ❤️ by Elizabeth Ekedoro

*Use responsibly. Use ethically.*

</div>

项目信息

开发语言：HTML

Star 数：4

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A hands-on project using GoPhish to demonstrate how phishing campaigns are designed and configured in a controlled environment. It covers sending profiles, email templates, landing pages, and campaign setup to simulate realistic phishing scenarios for security awareness, defensive training, and understanding social engineering techniques.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。