executing-phishing-simulation-campaign

Run a phishing simulation campaign by using a GoPhish-based REST API workflow to create email templates, landing pages, target groups, and campaigns. The Skill automates sending targeted phishing emails and tracks open rates, click-through rates, and credential submissions.

Phishing simulation metrics tracked include email open rates, click-through rates, and credential submission rates. These metrics measure human security awareness and establish baselines for training needs within security awareness programs.

Yes, you can automate sending phishing emails and aggregating results through the GoPhish REST API. The workflow creates templates, landing pages, target groups, and campaigns programmatically, then collects and reports the simulation metrics.

You need the requests library installed to use this phishing simulation automation. The Skill depends on the requests package to interact with the GoPhish REST API for campaign management and metrics aggregation.

Use phishing simulation in authorized red-team exercises to assess an organization's susceptibility to email-based social engineering attacks. It helps evaluate email security, user reporting behaviors, and incident response capabilities in a controlled testing environment.

The best way to document authorization for a social engineering assessment is by recording the authorization scope and campaign results for stakeholders. The Skill supports compliance and reporting by generating documentation of the authorized phishing simulation scope and metrics.