GoPhish Training Templates - Professional phishing simulation templates for security awareness training.
Find all templates with emojis:
grep -r "🎯\|🔒\|⚠️\|📧\|💰\|🎵\|☕\|🏛️\|📰\|🚨" --include="*.html" .List all email templates:
find . -name "*.html" -not -path "*/education/*" -not -path "*/landing-pages/*" -not -path "*/.git/*" | sortList templates by industry:
for dir in healthcare education manufacturing legal hr-payroll technology retail hospitality utilities; do echo "=== $dir ==="; find "$dir" -name "*.html" 2>/dev/null; doneList all landing pages:
find ./landing-pages -name "*.html"Count templates by category:
for dir in */; do echo "$dir: $(find "$dir" -maxdepth 1 -name "*.html" | wc -l)"; doneCheck for GoPhish variables:
grep -r "{{\.FirstName}}\|{{\.Email}}\|{{\.URL}}\|{{\.Tracker}}" --include="*.html"Find templates using specific variables:
grep -l "{{\.LastName}}" **/*.htmlValidate HTML files:
find . -name "*.html" -exec echo "Checking: {}" \; -exec head -1 {} \;Check for broken inline styles:
grep -n "style=" **/*.html | grep -v "style=\""Find deprecated Bootstrap CDN links:
grep -r "bootstrap.*3\.3\.7" --include="*.html"Check mobile viewport tags:
grep -L "viewport" **/*.htmlList all markdown files:
find . -name "*.md" | sortWord count for documentation:
wc -w campaign-guides/*.mdCurrent template structure (19 industries, 45+ templates):
Original Categories:
- delivery-shipping/ - Package delivery themed templates
- it-security/ - IT security alerts and system updates
- cloud-services/ - Cloud platform phishing (Dropbox, Google Drive)
- social-media/ - Social media platform impersonations
- financial/ - Banking and payment themed templates
- entertainment/ - Entertainment service phishing
- corporate/ - Corporate communications and news
- government/ - Government agency impersonations
- microsoft/ - Microsoft service themed templates
Industry-Specific Categories:
- healthcare/ - HIPAA compliance, patient portals, insurance (3 templates)
- education/ - Student portals, financial aid, academic systems (2 templates)
- manufacturing/ - Supplier portals, vendor compliance (1 template)
- legal/ - Case management, confidential documents (1 template)
- hr-payroll/ - Benefits, payroll, direct deposit (2 templates)
- technology/ - API keys, developer portals, SaaS (1 template)
- retail/ - Loyalty programs, customer accounts (1 template)
- hospitality/ - Hotel reservations, booking systems (1 template)
- utilities/ - Power/utility billing, service credits (1 template)
Landing Pages:
- landing-pages/ - Credential harvest and education pages
Create new template:
# Copy from existing template structure
cp it-security/email_issues.html new-category/new_template.htmlTest GoPhish variable rendering:
# Variables to test: {{.FirstName}}, {{.LastName}}, {{.Email}}, {{.URL}}, {{.Tracker}}Templates should:
- Use realistic, professional language
- Avoid excessive emojis or "cartoony" elements
- Include proper GoPhish tracking variables
- Be mobile responsive
- Follow real-world phishing patterns
- Match legitimate service styling
- Realism: Templates should closely mimic actual corporate/service emails
- Professionalism: Avoid emojis, excessive styling, or unrealistic language
- Effectiveness: Use proven social engineering techniques
- Education: Each template should have corresponding educational content
- Ethics: Designed for authorized security awareness training only
{{.FirstName}}- Recipient's first name{{.LastName}}- Recipient's last name{{.Email}}- Recipient's email address{{.URL}}- Unique tracking URL for the campaign{{.Tracker}}- Invisible tracking pixel{{.From}}- Sender email address{{.RId}}- Recipient ID
Mozilla Public License 2.0 (MPL-2.0)