Skip to content

Latest commit

 

History

History
28 lines (17 loc) · 1.17 KB

README.md

File metadata and controls

28 lines (17 loc) · 1.17 KB

Salmon Phishing Framework

Requires a Laravel Nova license.

Run php artisan storage:link!

It uses Mailgun for easy multi-domain management, SPF & DKIM, and other useful features out of the box (and free).

Environment variables

  • CONTACT: The contact text for the phishing display message (check resources/views/phished.blade.php)
  • MAILGUN_SECRET: Mailgun API secret.
  • MAILGUN_ENDPOINT: Mailgun server.
  • MAIL_HEADER: Mail header to send on all emails. Usefull for whitelisting in anti-spam policies.
  • DEFAULT_REDIRECT: URL to redirect all random website visits (anything else than admin and campaing views).

Bypassing anti-spam / anti-phishing filters

Gmail suspicious link

Suspicious link — This link leads to an untrusted site. Are you sure you want to proceed to xxx.yyy?

Solution: Add the site to Google Postmaster Tools and verify it. Also, using Mailgun click tracking (over CNAME) might help (not confirmed).

Sources: