# Performing Red Team Phishing With Gophish

> Automates GoPhish phishing simulation campaigns using the Python gophish

Automates GoPhish phishing simulation campaigns using the Python gophish

- Page: https://ss33.ai/skills/mukul975/performing-red-team-phishing-with-gophish-90776885287
- Publisher: mukul975
- Category: [Security](https://ss33.ai/skills/category/security-w9g95g) › [Misc](https://ss33.ai/skills/category/security-w9g95g/misc-ksbyjk)
- License: Apache-2.0
- Source: https://github.com/mukul975/anthropic-cybersecurity-skills/blob/54a798831d2266a3ca61ce68a7acb80b81160d57/skills/performing-red-team-phishing-with-gophish/SKILL.md

## Skill

SKILL.md: https://ss33.ai/api/v1/ss33/download/mukul975/performing-red-team-phishing-with-gophish-90776885287

## When to Use

- When conducting security assessments that involve performing red team phishing with gophish
- When following incident response procedures for related security events
- When performing scheduled security testing or auditing activities
- When validating security controls through hands-on testing

## Prerequisites

- Familiarity with security operations concepts and tools
- Access to a test or lab environment for safe execution
- Python 3.8+ with required dependencies installed
- Appropriate authorization for any testing activities

## Instructions

1. Install dependencies: `pip install gophish requests`
2. Deploy GoPhish server and obtain an API key from Settings.
3. Use the Python gophish library to automate campaign setup:
   - Create email templates with HTML body and tracking
   - Configure SMTP sending profiles
   - Import target groups from CSV
   - Create landing pages for credential capture
   - Launch and monitor campaigns
4. Analyze campaign results: opens, clicks, submitted data, reported.

```bash
# For authorized penetration testing and lab environments only
python scripts/agent.py --gophish-url https://localhost:3333 --api-key <key> --campaign-name "Q1 Awareness" --output phishing_report.json
```

## Examples

### Create Campaign via API
```python
from gophish import Gophish
from gophish.models import Campaign, Template, Group, SMTP, Page
api = Gophish("api_key", host="https://localhost:3333", verify=False)  # Self-signed cert on localhost lab
campaign = Campaign(name="Q1 Test", groups=[Group(name="Sales Team")],
    template=Template(name="IT Password Reset"), smtp=SMTP(name="Internal SMTP"),
    page=Page(name="Credential Page"))
api.campaigns.post(campaign)
```