Commit Graph

739 Commits (65f06c138f1234ab567399bc4f0ff5876774ae9a)

Author SHA1 Message Date
s vignesh 208b3e098c Fixing Memory Leak When Importing a Site 2016-09-15 01:03:55 -04:00
s vignesh bfb7fd11e8 Fixing XSS Vulnerabilities
This pull request fixed XSS vulnerabilities identified in the gophish admin panel.

**Important: These vulnerabilities could only be exploited if someone had access to the admin panel already, and could only exploit the vulnerability against the same account.**
2016-09-15 00:52:58 -04:00
Jordan Wright b7a2af338b Fixing template tracking. Fixes #361 2016-09-14 23:41:53 -05:00
Jordan Wright 103fd72cc8 Fixing context issues with Go 1.7. 2016-09-14 22:24:51 -05:00
Jordan Wright d687872462 Added gzip support on admin/phishing routers. Fixes #2 2016-08-16 20:20:11 -05:00
Jordan Wright bccf7f2fd2 Fixing issue where AM/PM are not handled correctly in campaign scheduling 2016-08-16 19:27:01 -05:00
Jordan Wright ac62f33e80 Now capturing IP and User Agent information in event logs. Fixes #280 2016-08-08 18:28:19 -05:00
Jordan Wright 672e095368 Updated README.md 2016-08-06 19:06:21 -05:00
Jordan Wright 33df3c3868 Added the version to the settings page. 2016-08-06 18:58:34 -05:00
Jordan Wright 576aa469e9 Adding the ability to replay credentials from the campaign results page 2016-08-06 18:06:18 -05:00
Jordan Wright cb70e0b953 Making all cookies httponly - Fixes #333 2016-08-06 16:00:36 -05:00
Jordan Wright 528418f16d Removing more unnecessary CKEditor sample files 2016-08-02 23:36:13 -05:00
Jordan Wright b00e6746d5 Potential fix for database locking issue. Fixes #331 2016-08-02 23:28:22 -05:00
Jordan Wright b403e97eee Cleaning up some email sending bugs. Fixes #329 2016-08-02 23:18:53 -05:00
Jordan Wright 0d8a793550 Merge branch 'master' of github.com:gophish/gophish 2016-07-24 19:38:03 -05:00
Jordan Wright 2eb2bf90a1 Added ability to use template values in Landing Pages. Fixes #327 2016-07-24 19:37:14 -05:00
Jordan Wright 267088c0b7 Merge pull request #324 from rcutmore/models-test-cleanup
Clean up between model tests
2016-07-20 21:54:26 -05:00
Rob Cutmore 2d4a755c2c Check for specific error in group tests 2016-07-18 18:47:28 -04:00
Rob Cutmore f9a15cfe3d Add more tests for getting group(s) 2016-07-16 08:38:27 -04:00
Rob Cutmore 3a9bc91415 Add tests for getting group(s) 2016-07-16 07:53:56 -04:00
Rob Cutmore b5b0f0ddf8 Use generic names for Group tests 2016-07-15 07:37:16 -04:00
Rob Cutmore bc678878e2 Put User tests together 2016-07-15 07:31:44 -04:00
Rob Cutmore e028806b5a Add cleanup between tests for models 2016-07-15 07:28:11 -04:00
Jordan Wright e746a86816 Implementing new alert dialogs. 2016-07-11 23:31:11 -05:00
Jordan Wright 737acbdb4e Remove unnecessary CKEditor samples 2016-07-11 22:21:01 -05:00
Jordan Wright 8cfdd07663 Merge pull request #322 from gophish/290-stop-campaign
Implement the ability to complete a campaign. Fixes #290
2016-07-11 22:16:27 -05:00
Jordan Wright 1dbf061d87 Implement the ability to complete a campaign. Fixes #290.
First implementation of new alert format.
2016-07-11 22:11:40 -05:00
Jordan Wright ca43a57767 Merge pull request #320 from rcutmore/web-group-editing
Validate target input on web front end
2016-07-10 17:30:33 -05:00
Rob Cutmore f88e68077e Add/update table when adding targets via CSV too 2016-07-09 16:15:47 -04:00
Rob Cutmore 21c55c579c Add/update group target as needed
When user submits a new target, target data table is checked for an
existing entry based on target email. If an existing entry is found
then it is updated, otherwise a new row is added to table. Target
email addresses are now converted to lower case to help prevent
duplicates as well.
2016-07-09 15:46:06 -04:00
Rob Cutmore 3996a702fe Clean up formatting of targets modal events 2016-07-09 09:06:30 -04:00
Jordan Wright 5cdfcbfe37 Now setting configured hostname when sending emails. Fixes #317 2016-07-06 23:25:28 -05:00
Jordan Wright d05a062a17 Merge pull request #315 from rcutmore/group-editing
Add target update capability to API - @rcutmore
2016-07-06 23:12:20 -05:00
Rob Cutmore 92f4ca6a90 Add empty attribute test for PutGroup
If passing a Target instance to the database Updates method then
empty attributes will be ignored. Using a map[string]interface
ensures all changed attributes, even empty ones, are persisted to
database.
2016-07-04 06:39:38 -04:00
Rob Cutmore 731c621095 Add test for PutGroup function 2016-07-02 18:22:44 -04:00
Rob Cutmore ec1c711b9b Allow group targets to be updated, fixes #18 2016-07-02 08:01:24 -04:00
Rob Cutmore 34021d9e3a Update comments for PutGroup function 2016-06-26 09:31:03 -04:00
Rob Cutmore 97c9bd16d1 Fix comments for group API functions 2016-06-23 06:04:35 -04:00
Jordan Wright 6558fe06d1 Merge pull request #297 from rcutmore/cleanup-campaign-copy
Remove groups from campaign copy
2016-06-13 17:22:39 -05:00
Rob Cutmore 00d1994671 Remove groups from campaign copy (Fixes #295)
An error was being raised when trying to copy groups for a campaign
because the individual targets for a campaign are tracked, not the
groups.
2016-06-13 06:17:11 -04:00
Jordan Wright 83f221e226 Merge pull request #296 from rcutmore/add-campaign-groups
Add selected group hint in campaign modal
2016-06-11 18:12:41 -05:00
Rob Cutmore aa8f80c694 Add selected group hint in campaign modal 2016-06-11 12:30:26 -04:00
Jordan Wright dff0e9ef25 Merge pull request #291 from rcutmore/fix-group-removal
Fix group removal
2016-06-09 23:20:03 -05:00
Rob Cutmore 5ca7744270 Fix indentation for group form submit 2016-06-09 08:14:26 -04:00
Rob Cutmore 9ec4dbe917 Fix campaign group removal (fixes #249)
Every time a group was added, the event handler for removing group was
set for all rows in group table. This change ensures the event handler
is only set for the newly added group.
2016-06-09 08:11:51 -04:00
Jordan Wright c5d6792bba Added /campaigns/:id/results endpoint to return campaign summary and make results page much quicker.
Fixes 282.
2016-06-07 22:31:55 -05:00
Jordan Wright 3d5b330c61 Merge branch 'master' of github.com:gophish/gophish 2016-06-07 21:42:31 -05:00
Jordan Wright 082023aae0 Adding the ability to schedule campaigns. Fixes #21 2016-06-07 21:42:09 -05:00
Jordan Wright 5df1e9500e Merge pull request #284 from rcutmore/add-campaign-group
Clear input after adding group to campaign
2016-06-05 17:53:08 -05:00
Rob Cutmore 80c799e0cc Clear input after adding group to campaign 2016-06-05 18:00:52 -04:00