Skip to content

Feature: Phishing Campaigns

Chris King edited this page Jan 7, 2017 · 4 revisions

FiercePhish Wiki

FiercePhish allows you to create large phishing campaigns that send emails over whatever length of time you would like. You simply give it an "Email Template", "Target User List", and sending schedule and it will take care of the rest.

Prerequisites

To make a phishing campaign, you need three things:

  1. Target Users

  2. A Target List filled with Target Users

  3. An email template

Make Targets

The instructions below show how to make target users and assign them to a target list.

Target Users

To add target users:

  1. Go to "Targets" --> "All Targets"

    All Targets

  2. To add a single target, just add their First Name, Last Name, and Email:

    Add single target

  3. You can also import large lists of target users by using the "Import Targets" feature:

    CSV format:

     george,michael,gmichael@gmail.com,This is a note for this person
     joshua,smith,jsmith@gmail.com,Another note, and a comma doesnt break the note
    

Once a target user is added, you can add notes to them:

Note

Target Lists

To add target users:

  1. Go to "Targets" --> "All Lists"

    All Lists

  2. Add a List by name

  3. You can add a note to the list after its been created Note to list

Assign Target Users to a Target List

To manage a target list:

  1. Either click on the "Target List" (to edit that list specifically) on the "All Lists" page, or go to "Targets" --> "Manage Target Lists"

    Manage target list

  2. Select the users you would like added to the list (or deselect the users you no longer want in the list)

    There are multiple buttons that assist you in assigning users to a list:

    * Select All on Page - Adds all the users that are listed on the current table page to a list
    * Select All - Adds all the target users in the system to a list
    * Deselect All - Deselecst all the users you have selected
    * Select X Amount Randomly - Fill in the text box named "X amount" to randomly select that number of users randomly
    * Only unassigned targets (checkbox) - Only randomly select users that are not a member of any other list
    
  3. After some users are selected, select the list to add them to

    Manage users

  4. Hit Save, the users are now a member of that list.

Make Email Template

To add an email template:

  1. Go to "Emails" --> "Email Templates"

    Email Templates

  2. Click "Create New Template"

    Create new template

  3. Type in the name of the template and click "Create".

  4. Now select that template in the list

  5. Type a standard message you would like to be emailed. It can use various variables, described in the information on the page.

    New template

  6. Scroll down to see a representation of what it will look like to a receiving user

    Outlook preview

  7. Click "Save Template"

Create a Campaign!

You can finally create a campaign:

  1. Click "Campaigns" --> "Create new Campaign"

  2. Fill in the campaign name, description, select the email template, and select the target list

  3. Insert the Sender Name and Sender Email you would like.

    Create campaign

  4. Select the sending schedule you would like:

    • All at once - Send all the emails together at one time
    • Send X emails every Y minutes - Choose how many emails you would like to send over a specified length of time (example: send 3 emails every 10 minutes).

    You can also choose when you want the campaign to start:

    • Starting date - Specify the date you would like the phishing campaign to start (default: immediately)
    • Starting time - Specify what time you would like the phishing campaign to start (default: immediately)

    For example, in total, you can say "Start the phishing engagement on January 10, 2017 at 4:00pm and then only send 2 emails every 2 minutes". This would mean on January 10 at 4:00pm, 2 emails would be sent. Then another 2 would be sent on January 10 at 4:02pm.

  5. Click "Launch Campaign"

Campaign Management

You can manage a campaign by coming to "Campaigns --> View all campaigns" and selecting a campaign. If the campaign has not been completed yet, you can cancel the remaining emails so no more emails are sent out.

Campaign Management

If you have issues with this feature, see Troubleshooting

Clone this wiki locally