Red-Team-Infrastructure-Wiki VS gophish

I found this as a useful starting point: https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki

We have done it by connecting a Huawei LTE-Stick to a Raspberry Pi with Kali Linux. It automatically sets up a VPN connection to a control server in AWS where we have red teaming infrastructure set up. When we then connect the rpi into the network we can do some SSH port forwarding and connect to the rpi, which is now a network implant where we can do basically anything from. This sometimes requires finding Active Directory credentials around the office or through a phishing campaign (really easy with the access to the local network) or something, in order to get a foothold onto the AD infrastructure.

this way is very phishable because today hackers just pay Google Ads for a concrete city to catch victims (who google) and redirect them to its phishing recourse (that could be created by gophish easily)

Try referring to https://getgophish.com/ which is an open source phishing tool, which can be used to run a phishing campaign

For free, GoPhish. If you have a handsome budget, Lucy.

https://github.com/gophish/gophish/issues/586 Found via https://docs.getgophish.com/user-guide/installation

For my first phishing campaigns, i used Gophish and i had good results. It will allow you to create the email, the landing page and all the necessary stuff around it. You also have mail and page templates that you can use and customize. Personally, I prefer to push the customization so that the mails look like real mails sent internally https://github.com/gophish/gophish/

Phishing with https://getgophish.com/