3 Importing Groups
Jordan Wright edited this page 2016-10-18 23:13:36 -05:00
This file contains ambiguous Unicode characters!

This file contains ambiguous Unicode characters that may be confused with others in your current locale. If your use case is intentional and legitimate, you can safely ignore this warning. Use the Escape button to highlight these characters.

Importing the Groups from Morning Catch Corporation

The first thing we need to do before we can launch a campaign is to figure out who to target. There are a ton of ways to gather/generate email addresses for potential targets. You can either harvest email addresses from public information using OSINT if you are aiming to simulate a realistic scenario.

Now that we have our list of users, lets import them into gophish.

To add a group, navigate to the “Users & Groups” page and click “New Group”:

screenshot coming soon

Since we are performing phishing simulation for Morning Catch, we can call our group “Morning Catch Employees”.

Now we have to add the members. There are two ways to do this:

  • Add each members details one at a time using the form inputs
  • Bulk import the group from a CSV file

To save time (and typing!) lets go with the CSV option.

Importing from CSV

The CSV format gophish expects has the following header values:

  • First Name
  • Last Name
  • Email
  • Position

So, the CSV for Morning Catch would look like the following:

First Name, Last Name, Position, Email, Company
Richard,Bourne,CEO,rbourne@morningcatch.ph,Morning Catch
Boyd,Jenius,Systems Administrator,bjenius@morningcatch.ph,Morning Catch
Haiti,Moreo,Sales & Marketing,hmoreo@morningcatch.ph,Morning Catch

After uploading this CSV using the “Bulk Import Users” button, we see that our members were added automatically:

screenshot coming soon!

After clicking “Save changes”, we see a confirmation message that our group was created.

Tip: If you dont see the group show up right away, refresh the page and it should appear in the table.