Gophis server
Anyone using Gophish sever? Im got it all set up but am having a hard time getting the from address to spoof. Any pointers?
Posted Nov 18, 2022, 3:51 PM UTC
25
We have one and have ran tests from it. We use an email account from our own mail domain. Haven't used a Gmail account on it.
You used to be able to allow less secure apps to connect but I think Google disabled that feature in May of this year.
Also looks like someone opened an issue about this on the gophish GitHub back in October.
1
Are you using Gmail by chance? AFAIK gmail will only allow you to change the name that appears on the email but not the actual email address itself.
yes I am. But i can do whatever. Use a 3rd party or my own SMTP. Im just not sure which route to go and what others are doing.
I just set gophish up last week and I was running into the same issue so what I ended up doing was just making a couple different spammy looking email addresses from the big domains (gmail, yahoo mail, etc). I still have not run a non-test campaign yet though.
how did you get around the 535 error of those email providors not allowing less secure login. They see Gophish as an app trying to login.