Starstruk Logo MarkStarstruk

v0.12.0

SparkAudio/Spark-TTSv0.12.0Aug 13, 2022by glennzw

AI Summary

A feature-rich release that adds attachment tracking, custom sender envelopes, and fixes several security vulnerabilities.

Key Highlights

  • Added attachment tracking using gophish variables for Word and Excel files
  • Inline images are now marked as embedded rather than attached
  • Custom sender envelopes allow passing SPF checks while spoofing emails
  • Added functionality to lock user accounts and display last login time

New Features

  • Attachment tracking with gophish variables
  • Inline image attachments
  • Custom sender envelopes
  • Account locking functionality

Full Release Notes

### Gophish just got better.

We're excited to announce the release of Gophish v0.12.0. This release includes important security fixes, adds some features, and fixes some bugs.

### Attachment Tracking
This has been a long time requested feature, and we're super excited to release it! We've added the ability to add [gophish variables](https://docs.getgophish.com/user-guide/template-reference) to a number of file types which can be attached to emails. As a trivial example it is possible to include `Hello {{.FirstName}}, please click here: {{.URL}}` to a Word document, or with a little more effort add tracking pixels to documents. This will allow notification of when users have opened attached files, or enabled macros in Office documents. We currently support the following file extensions: docx, docm, pptx, xlsx, xlsm, txt, html, ics. Please see the [documentation](https://docs.getgophish.com/user-guide/documentation/attachments) for more guidance and examples. 

### Inline Image Attachments #1525
Images in emails are now marked as `embedded` rather than `attached`, so email clients don't show them as attachments. This is a great addition to improve the quality of campaigns. Thanks @dzsibi 

### Custom Sender Envelopes #2334
We've added the ability to specify an envelope sender in templates.  If left empty, it will fallback to the SMTP-From in the Sender-settings. This can be used to pass SPF-checks but still send a spoofing email. Thanks @ChessSpider and @ptitdoc

### Added functionality to lock accounts #2060    
Added minor functionality to display last login time for each user in the User Management page and the ability to lock user accounts.

### Open Redirect #2262
Fixed a minor Open Redirect issue. Thanks @Kirill89

### Changelog

You can find the full changelog for this release [here.](https://github.com/gophish/gophish/compare/v0.11.0...v0.12.0)

### How to Upgrade

To upgrade, download the release for your platform, extract into a folder, and copy (**remember to copy, not move so that you have a backup**) your existing gophish.db file into the new directory. Then, run the new Gophish binary and you'll be good to go!

Now, one more thing:

### We want to hear from you! 

Have questions, comments, or feature ideas about Gophish? Let us know by [filing an issue](https://github.com/gophish/gophish/issues/new).

### Enjoy

| SHA256 Hash | Filename |
|-----|-----|
|42f228158e91e2fce182fbd60a6669fcbed21f76186563f264a941efbc9c1159|gophish-v0.12.0-linux-64bit.zip|
|d06945497f0f3467748c50e518aa4e526e8c71cd7fa58c23541cb65477539306|gophish-v0.12.0-osx-64bit.zip|
|c0fdc4a980914893a9d19544bb6233586db8d81a139657e9773ca8e03c387a02|gophish-v0.12.0-windows-64bit.zip|