v0.12.0
huggingface/finetrainersv0.12.0Aug 13, 2022by glennzw
AI Summary
A major feature release that introduces attachment tracking, inline image handling, custom sender envelopes, and account locking, alongside important security fixes.
Key Highlights
- Added Attachment Tracking allowing Gophish variables to be injected into attached files (docx, pptx, etc.) to track opens.
- Images in emails are now marked as `embedded` rather than `attached` to improve campaign appearance.
- Added Custom Sender Envelopes to templates for SPF compliance.
- Added functionality to lock user accounts and display last login times.
- Fixed a minor Open Redirect security vulnerability.
New Features
- Attachment tracking
- Inline image handling
- Custom sender envelopes
- Account locking functionality
Full Release Notes
### Gophish just got better.
We're excited to announce the release of Gophish v0.12.0. This release includes important security fixes, adds some features, and fixes some bugs.
### Attachment Tracking
This has been a long time requested feature, and we're super excited to release it! We've added the ability to add [gophish variables](https://docs.getgophish.com/user-guide/template-reference) to a number of file types which can be attached to emails. As a trivial example it is possible to include `Hello {{.FirstName}}, please click here: {{.URL}}` to a Word document, or with a little more effort add tracking pixels to documents. This will allow notification of when users have opened attached files, or enabled macros in Office documents. We currently support the following file extensions: docx, docm, pptx, xlsx, xlsm, txt, html, ics. Please see the [documentation](https://docs.getgophish.com/user-guide/documentation/attachments) for more guidance and examples.
### Inline Image Attachments #1525
Images in emails are now marked as `embedded` rather than `attached`, so email clients don't show them as attachments. This is a great addition to improve the quality of campaigns. Thanks @dzsibi
### Custom Sender Envelopes #2334
We've added the ability to specify an envelope sender in templates. If left empty, it will fallback to the SMTP-From in the Sender-settings. This can be used to pass SPF-checks but still send a spoofing email. Thanks @ChessSpider and @ptitdoc
### Added functionality to lock accounts #2060
Added minor functionality to display last login time for each user in the User Management page and the ability to lock user accounts.
### Open Redirect #2262
Fixed a minor Open Redirect issue. Thanks @Kirill89
### Changelog
You can find the full changelog for this release [here.](https://github.com/gophish/gophish/compare/v0.11.0...v0.12.0)
### How to Upgrade
To upgrade, download the release for your platform, extract into a folder, and copy (**remember to copy, not move so that you have a backup**) your existing gophish.db file into the new directory. Then, run the new Gophish binary and you'll be good to go!
Now, one more thing:
### We want to hear from you!
Have questions, comments, or feature ideas about Gophish? Let us know by [filing an issue](https://github.com/gophish/gophish/issues/new).
### Enjoy
| SHA256 Hash | Filename |
|-----|-----|
|42f228158e91e2fce182fbd60a6669fcbed21f76186563f264a941efbc9c1159|gophish-v0.12.0-linux-64bit.zip|
|d06945497f0f3467748c50e518aa4e526e8c71cd7fa58c23541cb65477539306|gophish-v0.12.0-osx-64bit.zip|
|c0fdc4a980914893a9d19544bb6233586db8d81a139657e9773ca8e03c387a02|gophish-v0.12.0-windows-64bit.zip|