skills.rest
xalgord
xalgordCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

performing-phishing-simulation-with-gophish

Deploys GoPhish to run authorized phishing simulation campaigns with tracking and reporting.

954|172|Updated Mar 13, 2026
Search Tags:#campaign tracking#social engineering#security awareness#phishing simulation#dmarc#email security#gophish
One-click install
npx skills add https://github.com/xalgord/xalgorix --skill performing-phishing-simulation-with-gophish
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: performing-phishing-simulation-with-gophish
Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/phishing-defense/performing-phishing-simulation-with-gophish
Command: npx skills add https://github.com/xalgord/xalgorix --skill performing-phishing-simulation-with-gophish

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security teams need to measure and improve employee resilience to phishing, but setting up realistic, trackable simulation campaigns with proper email deliverability, landing pages, and reporting is complex and error-prone.

Core Features & Use Cases

  • GoPhish Deployment & Configuration: Set up the GoPhish admin panel, phishing server, and SMTP sending profiles via Docker or binary installation.
  • Campaign Creation: Build email templates with tracking pixels ({{.Tracker}}) and phishing links ({{.URL}}), clone landing pages with credential capture, and import target user groups.
  • Result Analysis: Pull campaign data via the GoPhish API to generate reports on open, click, and submission rates.
  • Use Case: A security team runs a quarterly authorized phishing awareness campaign, verifies deliverability past the email gateway, captures simulated credential submissions, and redirects users to training.

Quick Start

Help me deploy GoPhish with Docker and create a test phishing campaign targeting a seed mailbox to verify tracking works end to end.

Frequently Asked Questions about performing-phishing-simulation-with-gophish

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up a phishing simulation with GoPhish?▼

Deploy GoPhish via Docker or binary, configure an SMTP sending profile, create an email template with {{.Tracker}} and {{.URL}} placeholders, build a landing page, import a user group CSV, and launch the campaign from the admin panel on port 3333.

Why are my GoPhish campaign emails not being delivered?▼

Delivery failures usually come from the secure email gateway quarantining the simulation or SPF/DMARC rejecting the sending domain. Allowlist the GoPhish sending IP in the gateway, send through an authenticated relay, and confirm delivery to a seed mailbox first.

Why are GoPhish open and click events not tracking?▼

Tracking fails when the {{.Tracker}} pixel or {{.URL}} link is omitted from the template, or when link-wrapping tools like Safe Links pre-fetch the URL and inflate clicks. Verify the full open, click, submit flow with a single test email before launch.

Does GoPhish support HTTPS landing pages for credential capture?▼

Yes, GoPhish landing pages can serve over HTTPS by installing a valid TLS certificate. Browsers and email gateways block mixed-content or invalid-cert pages, so HTTPS is required for reliable credential submission capture.

Is authorization required before running a phishing simulation?▼

Yes, written authorization from management and an HR-approved target list are required prerequisites. Credential capture must be scoped to the authorized test, and users should be redirected to awareness training after submission.

Related Skills

Explore More Software Engineering Skills→
davila7davila7
30.5k

SMTP Penetration Testing

Tests SMTP servers for open relays, user enumeration, weak authentication, and misconfigurations.

Community
Intermediate
jaskaranhundaljaskaranhundal
3

security-awareness

Measure human risk posture through phishing simulation and training metrics.

Community
Advanced
openaiopenai
5.3k

twilio-email-deliverability-advisor

Diagnose email deliverability issues for the Twilio Email API at comms.twilio.com.

Official
Intermediate
wyre-technologywyre-technology
39

KnowBe4 PhishER — Phishing Incidents

Manage phishing incidents in KnowBe4 PhishER with bulk remediation actions.

Official
Advanced