Gophish documentation

Gophish FAQ

Unable To Reach Admin Dashboard

If you get this error in your logs after loading Gophish then you browsed to http://admin_server instead of https://admin_server

Bypass Spam Filters

To bypass spam filters, temporarily whitelist the IP address of the server running Gophish.

Events Not Showing Up On The Dashboard

If emails are successfully sent, but events don’t show on the dashboard, then use the tips in this section to track down the error.

 

Check Email Template

Make sure to use the {{.URL}} template tag when using links in your emails. Gophish will insert the assigned URL in the template. Gophish will assign a unique URL for each recipient. Make sure not to insert the actual URL in the email template.

You can test that your template is working by building a campaign and sending the email to yourself. The URL will be the correct URL with a unique “rid” parameter.

 

Example: http://your_url/?rid=XXXXX

 

Check Campaign URL

If everything mentioned above doesn’t check out, then the next step is to make sure that you’re using the correct URL.

Check that the URL field is pointing to the server.

The email recipient also must be able to reach the URL. Ensure that the URL is accessible regardless of firewall settings, browser settings, etc…

If you want to test this, go to your browser and input the URL without “rid” parameters.

You should see a “404 page not found” error message. You will also see a log entered in your Gophish terminal.

Important: If your “phish_server” is set to use HTTPS, then you need to include the URL as “https://your_url”.

Form Data Isn’t Being Captured

Create an HTML <form> to capture data submitted through a landing page.

 

Add these properties to your <form> element:

 

<form action=”” method=”POST”>

    <input name=”username” type=”text” placeholder=”username” />

    <input name=”password” type=”password” placeholder=”password” />

    <input type=”submit” value=”Submit” />

</form>



Here are a few specifications required for the form:

 

Make sure to check all of the specifications when you troubleshoot your forms.

If you are still not seeing your form data, you might need to check to see if there is any JavaScript that needs to be removed on your landing page.

Once you are done with the landing page, make sure that you have “Capture Submitted Data” and “Capture Passwords” checked if they apply to your campaign. If not, Gophish will remove the name attributes from your inputs so that they aren’t submitted in the form.

Are You Ready To gophish?

Gophish documentation

Gophish FAQ

Unable To Reach Admin Dashboard

If you get this error in your logs after loading Gophish then you browsed to http://admin_server instead of https://admin_server

Bypass Spam Filters

To bypass spam filters, temporarily whitelist the IP address of the server running Gophish.

Events Not Showing Up On The Dashboard

If emails are successfully sent, but events don’t show on the dashboard, then use the tips in this section to track down the error.

 

Check Email Template

Make sure to use the {{.URL}} template tag when using links in your emails. Gophish will insert the assigned URL in the template. Gophish will assign a unique URL for each recipient. Make sure not to insert the actual URL in the email template.

You can test that your template is working by building a campaign and sending the email to yourself. The URL will be the correct URL with a unique “rid” parameter.

 

Example: http://your_url/?rid=XXXXX

 

Check Campaign URL

If everything mentioned above doesn’t check out, then the next step is to make sure that you’re using the correct URL.

Check that the URL field is pointing to the server.

The email recipient also must be able to reach the URL. Ensure that the URL is accessible regardless of firewall settings, browser settings, etc…

If you want to test this, go to your browser and input the URL without “rid” parameters.

You should see a “404 page not found” error message. You will also see a log entered in your Gophish terminal.

Important: If your “phish_server” is set to use HTTPS, then you need to include the URL as “https://your_url”.

Form Data Isn’t Being Captured

Create an HTML <form> to capture data submitted through a landing page.

 

Add these properties to your <form> element:

 

<form action=”” method=”POST”>

    <input name=”username” type=”text” placeholder=”username” />

    <input name=”password” type=”password” placeholder=”password” />

    <input type=”submit” value=”Submit” />

</form>



Here are a few specifications required for the form:

Make sure to check all of the specifications when you troubleshoot your forms.

If you are still not seeing your form data, you might need to check to see if there is any JavaScript that needs to be removed on your landing page.

Once you are done with the landing page, make sure that you have “Capture Submitted Data” and “Capture Passwords” checked if they apply to your campaign. If not, Gophish will remove the name attributes from your inputs so that they aren’t submitted in the form.

Are You Ready To gophish?

Gophish documentation

Gophish FAQ

Unable To Reach Admin Dashboard

If you get this error in your logs after loading Gophish then you browsed to http://admin_server instead of https://admin_server

Bypass Spam Filters

To bypass spam filters, temporarily whitelist the IP address of the server running Gophish.

Events Not Showing Up On The Dashboard

If emails are successfully sent, but events don’t show on the dashboard, then use the tips in this section to track down the error.

 

Check Email Template

Make sure to use the {{.URL}} template tag when using links in your emails. Gophish will insert the assigned URL in the template. Gophish will assign a unique URL for each recipient. Make sure not to insert the actual URL in the email template.

You can test that your template is working by building a campaign and sending the email to yourself. The URL will be the correct URL with a unique “rid” parameter.

 

Example: http://your_url/?rid=XXXXX

 

Check Campaign URL

If everything mentioned above doesn’t check out, then the next step is to make sure that you’re using the correct URL.

Check that the URL field is pointing to the server.

The email recipient also must be able to reach the URL. Ensure that the URL is accessible regardless of firewall settings, browser settings, etc…

If you want to test this, go to your browser and input the URL without “rid” parameters.

You should see a “404 page not found” error message. You will also see a log entered in your Gophish terminal.

Important: If your “phish_server” is set to use HTTPS, then you need to include the URL as “https://your_url”.

Form Data Isn’t Being Captured

Create an HTML <form> to capture data submitted through a landing page.

 

Add these properties to your <form> element:

 

<form action=”” method=”POST”>

    <input name=”username” type=”text” placeholder=”username” />

    <input name=”password” type=”password” placeholder=”password” />

    <input type=”submit” value=”Submit” />

</form>



Here are a few specifications required for the form:

Make sure to check all of the specifications when you troubleshoot your forms.

If you are still not seeing your form data, you might need to check to see if there is any JavaScript that needs to be removed on your landing page.

Once you are done with the landing page, make sure that you have “Capture Submitted Data” and “Capture Passwords” checked if they apply to your campaign. If not, Gophish will remove the name attributes from your inputs so that they aren’t submitted in the form.

Are You Ready To gophish?