virtualsamuraii/flyphishDeploy a phishing infrastructure on the fly.
Flyphish is an Ansible playbook allowing cyber security consultants to deploy a phishing server in the cloud for security assessments.
The playbook installs and configures Gophish, Postfix and OpenDKIM on a virtual machine in the cloud. Additionally, for OPSEC purposes, the playbook removes default IOCs (SMTP headers) from Gophish and Postfix servers configurations.
Purchase a domain and set it's DNS records accordingly (A, MX and SPF records must point to your cloud instance's public IP address).
Install Ansible on your own machine :
sudo apt install ansible
git clone --recursively https://github.com/VirtualSamuraii/flyphish.git
Put your cloud instance public IP address in the file.
Put your phishing domain in the group_vars/all.yml file.
You're ready to go !
ansible-playbook -i hosts playbook.yml
The rest is up to you.
From now on, you can log into your cloud instance using SSH, start your Gophish server and configure it to send signed emails from your Postfix SMTP server.
ssh -i ~/.ssh/id_rsa youruser@yourcloudinstance -q -C -N -L 3333:127.0.0.1:3333
