// readme

Flyphish

Flyphish is an Ansible playbook allowing cyber security consultants to deploy a phishing server in the cloud for security assessments.

The playbook installs and configures Gophish, Postfix and OpenDKIM on a virtual machine in the cloud. Additionally, for OPSEC purposes, the playbook removes default IOCs (SMTP headers) from Gophish and Postfix servers configurations.

Install

Requirements

  • Make sure you have a Linux (Debian, Ubuntu or Kali) instance in the cloud (Amazon EC2, Azure VM, Google GCE…) with a public IPv4 address, Git & OpenSSH installed. Enable root access with SSH key-based authentication only.

  • Make sure you have a domain name and set it’s DNS records accordingly (A, MX and SPF records must point to your cloud instance’s public IP address).

  • Install Ansible on your own machine :

sudo apt install ansible

Installation steps

  • Clone the repository
git clone --recursively https://github.com/VirtualSamuraii/flyphish.git

  • Put your cloud instance public IP address in the hosts file.

  • Put your “phishing domain” and “sender domain” in the group_vars/all.yml file.

The “phishing_domain” variable is the…