Creating the Template
We notice that Morning Catch comes with a webmail portal. Let’s craft a simple template that suggests the user needs to go reset their password. Obviously, this is a simple scenario, and by using the “Import Email” feature, you can import existing emails directly into gophish for a greater effect.
We’ll use the following subject line:
By clicking the “HTML” tab, we will see the editor we can use to create our HTML content:
Since our content is pretty simple, we can just click the “Source” button and be taken to the more visual editor, which will be enough for our purposes:
Our template will be simple for the sake of demonstration. I’ll start by adding the message:
{{.FirstName}},
The password for {{.Email}} has expired. Please reset your password here.
Thanks,
Speaking of links, now we need to add our phishing link. Highlight the word “here” and click the chain icon in the menu, exposing the “Link” dialog. In this dialog, we’ll set the link to {{.URL}}
, another template value, so that our link is automatically created and inserted into the email.