skills.rest
xalgord
xalgordCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

performing-red-team-phishing-with-gophish

Automates GoPhish phishing simulation campaigns and analyzes open, click, and credential submission metrics.

954|172|Updated Mar 13, 2026
Search Tags:#Python#social engineering#security awareness#phishing simulation#campaign automation#Red Team#gophish
One-click install
npx skills add https://github.com/xalgord/xalgorix --skill performing-red-team-phishing-with-gophish
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: performing-red-team-phishing-with-gophish
Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/security-operations/performing-red-team-phishing-with-gophish
Command: npx skills add https://github.com/xalgord/xalgorix --skill performing-red-team-phishing-with-gophish

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gophish, requests, and includes scripts (resource) components.

What problem does it solve?

Running authorized phishing simulations manually through the GoPhish UI is slow and error-prone, and misconfigured sending profiles or tracking settings silently invalidate results. This Skill automates campaign creation, launch, and results analysis through the GoPhish API so red teams get reliable security awareness metrics.

Core Features & Use Cases

  • Campaign Automation: Creates email templates with tracking pixels, configures SMTP sending profiles, imports target groups from CSV, and launches campaigns via the Python gophish library.
  • Results Analysis: Computes open rates, click rates, and credential submission statistics for security awareness assessment.
  • Deliverability Validation: Guides verification of SPF/DKIM/DMARC alignment, sending profile tests, and end-to-end open-to-submit tracking before drawing conclusions.
  • Use Case: A red team runs a quarterly phishing assessment against the sales department, launching the campaign via the GoPhish API and exporting a JSON report of opens, clicks, and submitted credentials.

Quick Start

Ask the assistant to run the GoPhish automation script against your local GoPhish server with your API key and campaign name to generate a phishing results report.

Frequently Asked Questions about performing-red-team-phishing-with-gophish

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a GoPhish phishing campaign with Python?▼

Install the gophish and requests packages, then use the Gophish API client to create Template, SMTP, Group, and Page objects and post a Campaign. The GoPhish server URL and API key from Settings are required to authenticate.

How do I create a GoPhish campaign using the API?▼

Instantiate the Gophish client with your API key and host, build a Campaign object referencing an existing template, sending profile, group, and landing page by name, then call api.campaigns.post(campaign) to launch it.

Why does my GoPhish campaign show zero opens?▼

Zero opens usually indicates delivery failure rather than vigilant users. Verify SPF, DKIM, and DMARC alignment on the sending domain, check blocklist status, send a test email from the sending profile, and confirm the tracking pixel URL is reachable externally.

Why are submitted credentials not recorded in GoPhish?▼

The landing page must have Capture Submitted Data and Capture Passwords enabled plus a valid redirect URL. Submit a test credential yourself and confirm it appears in the campaign results before launching against real targets.

What metrics can I analyze from a GoPhish campaign?▼

GoPhish campaign results include email opens, link clicks, submitted data, and reported events. These are aggregated into open rates, click rates, and credential submission statistics for security awareness reporting.

Related Skills

Explore More Software Engineering Skills→
balsm-healthbalsm-health
2

analyzing-email-headers-for-phishing-investigation

Parse email headers and validate SPF, DKIM, and DMARC records.

Official
Advanced
wyre-technologywyre-technology
39

KnowBe4 Training Campaigns

Manages and analyzes KnowBe4 phishing simulation and security awareness training campaigns.

Official
Intermediate
wyre-technologywyre-technology
39

ironscales_incidents

Manage Ironscales phishing incidents via API for triage, classification, and remediation.

Official
Advanced
AcczdyAcczdy
2

executing-phishing-simulation-campaign

Automate GoPhish phishing campaigns via REST API with metrics reporting.

Community
Advanced