Starstruk Logo MarkStarstruk

v0.12.0

CaviraOSS/LongMemoryv0.12.0Aug 13, 2022by glennzw

AI Summary

This release introduces significant new features for phishing campaigns, including attachment tracking, inline image handling, and custom sender envelopes, alongside important security fixes.

Key Highlights

  • Added Attachment Tracking with support for Gophish variables in multiple file types (docx, pptx, xlsx, etc.).
  • Changed inline images to be embedded rather than attached to improve email client quality.
  • Added support for Custom Sender Envelopes to bypass SPF checks while spoofing emails.
  • Implemented account locking functionality and display of last login time.
  • Fixed a minor Open Redirect vulnerability.

New Features

  • Attachment tracking
  • Inline image embedding
  • Custom sender envelopes
  • Account locking

Full Release Notes

### Gophish just got better.

We're excited to announce the release of Gophish v0.12.0. This release includes important security fixes, adds some features, and fixes some bugs.

### Attachment Tracking
This has been a long time requested feature, and we're super excited to release it! We've added the ability to add [gophish variables](https://docs.getgophish.com/user-guide/template-reference) to a number of file types which can be attached to emails. As a trivial example it is possible to include `Hello {{.FirstName}}, please click here: {{.URL}}` to a Word document, or with a little more effort add tracking pixels to documents. This will allow notification of when users have opened attached files, or enabled macros in Office documents. We currently support the following file extensions: docx, docm, pptx, xlsx, xlsm, txt, html, ics. Please see the [documentation](https://docs.getgophish.com/user-guide/documentation/attachments) for more guidance and examples. 

### Inline Image Attachments #1525
Images in emails are now marked as `embedded` rather than `attached`, so email clients don't show them as attachments. This is a great addition to improve the quality of campaigns. Thanks @dzsibi 

### Custom Sender Envelopes #2334
We've added the ability to specify an envelope sender in templates.  If left empty, it will fallback to the SMTP-From in the Sender-settings. This can be used to pass SPF-checks but still send a spoofing email. Thanks @ChessSpider and @ptitdoc

### Added functionality to lock accounts #2060    
Added minor functionality to display last login time for each user in the User Management page and the ability to lock user accounts.

### Open Redirect #2262
Fixed a minor Open Redirect issue. Thanks @Kirill89

### Changelog

You can find the full changelog for this release [here.](https://github.com/gophish/gophish/compare/v0.11.0...v0.12.0)

### How to Upgrade

To upgrade, download the release for your platform, extract into a folder, and copy (**remember to copy, not move so that you have a backup**) your existing gophish.db file into the new directory. Then, run the new Gophish binary and you'll be good to go!

Now, one more thing:

### We want to hear from you! 

Have questions, comments, or feature ideas about Gophish? Let us know by [filing an issue](https://github.com/gophish/gophish/issues/new).

### Enjoy

| SHA256 Hash | Filename |
|-----|-----|
|42f228158e91e2fce182fbd60a6669fcbed21f76186563f264a941efbc9c1159|gophish-v0.12.0-linux-64bit.zip|
|d06945497f0f3467748c50e518aa4e526e8c71cd7fa58c23541cb65477539306|gophish-v0.12.0-osx-64bit.zip|
|c0fdc4a980914893a9d19544bb6233586db8d81a139657e9773ca8e03c387a02|gophish-v0.12.0-windows-64bit.zip|