WEBVTT

00:00:01.120 --> 00:00:03.840
In this demo, we're going to get started with Gophish.

00:00:04.640 --> 00:00:06.950
We'll start with a quick overview of the lab I'm using in

00:00:06.950 --> 00:00:09.790
this course and different options you can use to create a

00:00:09.790 --> 00:00:11.700
suitable environment to test Gophish.

00:00:12.240 --> 00:00:13.750
Once we cover the lab environment,

00:00:14.140 --> 00:00:17.450
we'll obtain Gophish and started on our hacking workstation.

00:00:17.840 --> 00:00:20.380
We'll then access the Web interface and explore the

00:00:20.380 --> 00:00:22.940
different menus and options that we'll use in this course

00:00:22.990 --> 00:00:24.660
to create our phishing campaigns.

00:00:25.740 --> 00:00:29.050
If you're ready to get started, let's head over to the lab for the overview.

00:00:30.100 --> 00:00:32.890
Instead of setting up a full Windows lab with a domain

00:00:32.890 --> 00:00:34.750
and email services for this course,

00:00:35.180 --> 00:00:39.450
I opted instead to keep it simple and use the Morning Catch virtual machine.

00:00:40.740 --> 00:00:43.530
The Morning Catch virtual machine is a full environment

00:00:43.540 --> 00:00:46.840
already set up with two accounts configured to receive emails

00:00:46.850 --> 00:00:49.250
sent to the morningcatch.ph domain.

00:00:49.940 --> 00:00:53.450
We'll be able to use Thunderbird to check our emails sent to this domain.

00:00:54.280 --> 00:00:56.650
We'll be attacking from a Kali Linux machine where

00:00:56.650 --> 00:00:58.400
we'll install Gophish shortly.

00:00:59.140 --> 00:01:01.410
You can download the Morning Catch virtual machine from a

00:01:01.410 --> 00:01:03.050
link I'll include in the demo files.

00:01:03.740 --> 00:01:05.440
It requires no real additional setup.

00:01:05.450 --> 00:01:08.090
You just have to import it into VMware Workstation or

00:01:08.090 --> 00:01:09.950
VMware Player in order to use it.

00:01:11.140 --> 00:01:15.040
Now that we covered the lab setup, we're ready to download and install Gophish.

00:01:15.440 --> 00:01:18.050
I'm going to run Gophish on this Kali Linux VM,

00:01:18.440 --> 00:01:21.650
which will also host the malicious page used in the first scenario.

00:01:22.500 --> 00:01:24.850
Gophish has two prerequisites we need to install,

00:01:25.290 --> 00:01:27.570
the Go programming language and GCC.

00:01:27.820 --> 00:01:28.710
We'll start with GCC.

00:01:28.710 --> 00:01:34.430
As you can see here, I already installed it,

00:01:34.770 --> 00:01:36.250
and it's running the newest version.

00:01:36.430 --> 00:01:38.550
But if you haven't, this is the command that you'll need.

00:01:39.620 --> 00:01:41.890
Next, we need to install the Go programming language.

00:01:41.890 --> 00:01:45.750
For our first step, we're going to go ahead and download it from the website.

00:01:46.400 --> 00:01:49.250
You can find the Go programming language at this address,

00:01:49.260 --> 00:01:54.270
golang.org/dl, and we're going to need the Linux version.

00:01:57.840 --> 00:02:00.280
And once that downloads, we just need to extract the file.

00:02:01.440 --> 00:02:02.070
And to do that,

00:02:02.070 --> 00:02:06.670
we're just going to use this command and extract it to the user/local directory.

00:02:06.670 --> 00:02:09.330
Once it's extracted,

00:02:09.330 --> 00:02:12.740
we need to set up a Go workspace and change a few GOPATH

00:02:12.740 --> 00:02:14.460
environment variables within bashrc.

00:02:14.460 --> 00:02:16.520
For my Go workspace,

00:02:16.520 --> 00:02:18.780
I'm just going to create a directory in my home

00:02:18.780 --> 00:02:21.150
directory called to go‑workspace.

00:02:24.500 --> 00:02:28.350
And then once we've created that workspace, we'll go ahead and edit bashrc.

00:02:33.840 --> 00:02:36.650
So to do that, we're just going to add a few commands to the end of this file.

00:02:37.590 --> 00:02:38.140
The first,

00:02:38.150 --> 00:02:41.520
we're going to set the GOPATH to that Go workspace using

00:02:41.530 --> 00:02:45.260
export GOPATH=/home/kali/go‑workspace.

00:02:45.260 --> 00:02:51.460
For the next variable,

00:02:51.460 --> 00:02:56.270
we're going to set the GOROOT to our user/local/go folder

00:02:56.430 --> 00:02:58.250
where we extracted the files we downloaded.

00:02:59.340 --> 00:03:13.350
Now we just need to set the path, and then we save that and exit.

00:03:14.610 --> 00:03:17.310
Now we just reload bashrc using this command.

00:03:17.310 --> 00:03:21.990
You can test to see that your Go language was

00:03:21.990 --> 00:03:24.090
installed correctly by just typing go.

00:03:24.380 --> 00:03:25.520
And if it was successful,

00:03:25.530 --> 00:03:28.050
you should come up with some information about the Go tool.

00:03:28.940 --> 00:03:32.850
We can use this go command to download Gophish directly into our GOPATH.

00:03:33.740 --> 00:03:42.580
To do that, wel'll type go get github.com/gophish/gophish, and

00:03:42.580 --> 00:03:44.250
we'll come back when that finishes downloading.

00:03:45.540 --> 00:03:46.670
And once that's finished,

00:03:46.680 --> 00:03:49.200
we'll just navigate to that directory where it downloaded.

00:03:50.740 --> 00:03:55.050
And once we're in that directory, we just execute the command go build.

00:03:57.910 --> 00:03:59.140
Once that command is done,

00:03:59.150 --> 00:04:03.550
it will create a gophish binary in the same directory. To run it, we just

00:04:03.550 --> 00:04:09.630
need to type sudo ./gophish, and we'll see that it starts the admin server

00:04:09.910 --> 00:04:13.380
at our localhost IP address on port 3333.

00:04:13.660 --> 00:04:15.450
So let's use our browser to navigate to that.

00:04:19.339 --> 00:04:22.100
You'll see in the logs it has the username admin,

00:04:22.110 --> 00:04:23.750
and it generates a password for you.

00:04:25.140 --> 00:04:29.150
We'll just copy this password and paste it in,

00:04:32.640 --> 00:04:34.830
and then we'll have to reset it to a new password.

00:04:35.020 --> 00:04:37.550
So I'm going to go ahead and do that, and then I'll come back.

00:04:38.440 --> 00:04:39.600
Once you reset your password,

00:04:39.600 --> 00:04:43.430
you should arrive at this dashboard. Within here, you'll see different menus

00:04:43.430 --> 00:04:48.430
off to the left, from the campaigns that we'll set up later, landing pages if

00:04:48.430 --> 00:04:52.960
we want to create them for users to land on from malicious links we send, a

00:04:52.960 --> 00:04:54.750
page for creating email templates,

00:04:55.440 --> 00:05:00.660
groups and users, different sending profiles, and account settings

00:05:00.660 --> 00:05:03.940
if we want to change our password, change the way our results

00:05:03.940 --> 00:05:06.710
display, and change reporting settings.

00:05:08.640 --> 00:05:11.270
Once you reach this point, you're ready for the rest of this course.

00:05:11.360 --> 00:05:14.550
We will be using gophish to attack our example domain.

00:05:15.240 --> 00:05:16.550
But before we get into that,

00:05:17.040 --> 00:05:19.750
let's do a quick overview of what we learned so far in this course.

00:05:21.240 --> 00:05:21.920
In this demo,

00:05:21.930 --> 00:05:24.520
we started out by going over the lab overview I'm using

00:05:24.560 --> 00:05:26.540
that we'll be exploiting using gophish.

00:05:27.490 --> 00:05:31.820
We also downloaded and installed the prerequisites GCC and the Go

00:05:31.820 --> 00:05:34.210
programming language to our Kali Linux machine.

00:05:35.140 --> 00:05:35.650
Finally,

00:05:35.650 --> 00:05:39.080
we downloaded, installed, and ran Gophish and then accessed

00:05:39.080 --> 00:05:41.150
our admin dashboard through the web browser.