Skip to content

Latest commit

 

History

History
154 lines (118 loc) · 4.24 KB

File metadata and controls

154 lines (118 loc) · 4.24 KB

Claude Code Quick Reference

Project Overview

GoPhish Training Templates - Professional phishing simulation templates for security awareness training.

Quick Commands

Search and Analysis

Find all templates with emojis:

grep -r "🎯\|🔒\|⚠️\|📧\|💰\|🎵\|☕\|🏛️\|📰\|🚨" --include="*.html" .

List all email templates:

find . -name "*.html" -not -path "*/education/*" -not -path "*/landing-pages/*" -not -path "*/.git/*" | sort

List templates by industry:

for dir in healthcare education manufacturing legal hr-payroll technology retail hospitality utilities; do echo "=== $dir ==="; find "$dir" -name "*.html" 2>/dev/null; done

List all landing pages:

find ./landing-pages -name "*.html"

Count templates by category:

for dir in */; do echo "$dir: $(find "$dir" -maxdepth 1 -name "*.html" | wc -l)"; done

Template Management

Check for GoPhish variables:

grep -r "{{\.FirstName}}\|{{\.Email}}\|{{\.URL}}\|{{\.Tracker}}" --include="*.html"

Find templates using specific variables:

grep -l "{{\.LastName}}" **/*.html

Validate HTML files:

find . -name "*.html" -exec echo "Checking: {}" \; -exec head -1 {} \;

Testing and Validation

Check for broken inline styles:

grep -n "style=" **/*.html | grep -v "style=\""

Find deprecated Bootstrap CDN links:

grep -r "bootstrap.*3\.3\.7" --include="*.html"

Check mobile viewport tags:

grep -L "viewport" **/*.html

Documentation

List all markdown files:

find . -name "*.md" | sort

Word count for documentation:

wc -w campaign-guides/*.md

Template Categories

Current template structure (19 industries, 45+ templates):

Original Categories:

  • delivery-shipping/ - Package delivery themed templates
  • it-security/ - IT security alerts and system updates
  • cloud-services/ - Cloud platform phishing (Dropbox, Google Drive)
  • social-media/ - Social media platform impersonations
  • financial/ - Banking and payment themed templates
  • entertainment/ - Entertainment service phishing
  • corporate/ - Corporate communications and news
  • government/ - Government agency impersonations
  • microsoft/ - Microsoft service themed templates

Industry-Specific Categories:

  • healthcare/ - HIPAA compliance, patient portals, insurance (3 templates)
  • education/ - Student portals, financial aid, academic systems (2 templates)
  • manufacturing/ - Supplier portals, vendor compliance (1 template)
  • legal/ - Case management, confidential documents (1 template)
  • hr-payroll/ - Benefits, payroll, direct deposit (2 templates)
  • technology/ - API keys, developer portals, SaaS (1 template)
  • retail/ - Loyalty programs, customer accounts (1 template)
  • hospitality/ - Hotel reservations, booking systems (1 template)
  • utilities/ - Power/utility billing, service credits (1 template)

Landing Pages:

  • landing-pages/ - Credential harvest and education pages

Development Workflow

Create new template:

# Copy from existing template structure
cp it-security/email_issues.html new-category/new_template.html

Test GoPhish variable rendering:

# Variables to test: {{.FirstName}}, {{.LastName}}, {{.Email}}, {{.URL}}, {{.Tracker}}

Quality Checks

Templates should:

  • Use realistic, professional language
  • Avoid excessive emojis or "cartoony" elements
  • Include proper GoPhish tracking variables
  • Be mobile responsive
  • Follow real-world phishing patterns
  • Match legitimate service styling

Template Design Principles

  1. Realism: Templates should closely mimic actual corporate/service emails
  2. Professionalism: Avoid emojis, excessive styling, or unrealistic language
  3. Effectiveness: Use proven social engineering techniques
  4. Education: Each template should have corresponding educational content
  5. Ethics: Designed for authorized security awareness training only

Common GoPhish Variables

  • {{.FirstName}} - Recipient's first name
  • {{.LastName}} - Recipient's last name
  • {{.Email}} - Recipient's email address
  • {{.URL}} - Unique tracking URL for the campaign
  • {{.Tracker}} - Invisible tracking pixel
  • {{.From}} - Sender email address
  • {{.RId}} - Recipient ID

License

Mozilla Public License 2.0 (MPL-2.0)