{"id":6547,"date":"2024-04-06T09:49:31","date_gmt":"2024-04-06T07:49:31","guid":{"rendered":"https:\/\/www.sigalou-domotique.fr\/?p=6547"},"modified":"2026-01-02T16:56:27","modified_gmt":"2026-01-02T14:56:27","slug":"lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish","status":"publish","type":"post","link":"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish","title":{"rendered":"Lanzamiento de una simulaci\u00f3n pedag\u00f3gica de phishing en un inquilino de Microsoft 365 con Gophish"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-light-blue ez-toc-container-direction\">\n<label for=\"ez-toc-cssicon-toggle-item-6ae450a3490d1\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">alternar<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewbox=\"0 0 24 24\" version=\"1.2\" baseprofile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6ae450a3490d1\"  aria-label=\"Alternador\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Mon_objectif\" >Mi objetivo<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Disclaimer\" >descargo<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Outils_utilises\" >Herramientas utilizadas<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Je_cree_un_compte_Amazon_AWS\" >Creo una cuenta de Amazon AWS\u00a0<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Je_cree_une_instance_sur_EC2\" >Creo una instancia en EC2<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Je_configure_le_groupe_de_securite_de_mon_instance\" >Configurar el grupo de seguridad de mi instancia<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Jutilise_une_Adresse_IP_Elastic_facultatif\" >Uso una direcci\u00f3n IP el\u00e1stica (opcional)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Jinstalle_Putty\" >Instalo Putty\u00a0<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Jinstalle_GoPhish\" >Instalo GoPhish<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Je_souhaite_utiliser_Gophish_sans_garder_ma_fenetre_SSH_ouverte_facultatif\" >Quiero usar Gophish sin mantener mi ventana SSH abierta (opcional)<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Jautorise_le_lancement_de_Gophish_sans_etre_root_sudo\" >Autorizo el lanzamiento de Gophish sin ser root (sudo)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Message_derreur_open_gophish_adminkey_permission_denied\" >Abra el mensaje de error gophish_admin.key:\u00a0permiso denegado<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Je_declare_gophish_comme_un_service\" >Declaro el gophish como un servicio<\/a><\/li><\/ul><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Je_lance_GoPhish\" >Voy a lanzar GoPhish.<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Jajoute_un_utilisateur_%C2%AB_piegeur_%C2%BB_sur_le_Tenant_365\" >Estoy a\u00f1adiendo un usuario \u00abtrapper\u00bb al Inquilino 365<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Je_configure_Microsoft_Defender_pour_autoriser_GoPhish\" >Configurar Microsoft Defender para permitir GoPhish<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Je_configure_le_SMTP_de_GoPhish\" >Configurar GoPhish SMTP<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Je_vais_recuperer_tous_les_utilisateurs_du_Tenant_Microsoft_365\" >Voy a recuperar a todos los usuarios del Tenant Microsoft 365<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Jinjecte_les_utilisateurs_dans_un_groupe_GoPhish\" >Inyecto usuarios en un grupo GoPhish<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Je_configure_le_mail_de_phishing\" >Configurar el correo de phishing<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Je_configure_la_page_de_hameconnage\" >Configurar la p\u00e1gina de phishing<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Je_lance_la_campagne_dhameconnage\" >Lanzo la campa\u00f1a de phishing<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.sigalou-domotique.fr\/es\/lancer-une-simulation-dhameconnage-a-visee-pedagogique-sur-un-tenant-microsoft-365-avec-gophish\/#Bibliographie\" >Bibliograf\u00eda<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Mon_objectif\"><\/span>Mi objetivo<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Con el fin de sensibilizar a los usuarios del inquilino de Microsoft 365 que utilizo, mir\u00e9 c\u00f3mo crear una campa\u00f1a de phishing para \u00abatraparlos\u00bb y activar la formaci\u00f3n sobre este tema.<\/p>\r\n<p>Los mensajes de prevenci\u00f3n y las campa\u00f1as de higiene digital no son suficientes, se necesita un hecho concreto para tratar de generar conciencia.<!--more--><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Disclaimer\"><\/span>descargo<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>A riesgo de repetirme, mi objetivo no es lanzar una campa\u00f1a de correo directo o phishing, es pedag\u00f3gico.<\/p>\r\n<p>Tenga en cuenta que los elementos que se explican a continuaci\u00f3n no funcionar\u00e1n si no es administrador del inquilino para atacar, ya que debe autorizar la IP de GoPhish, sin esta autorizaci\u00f3n, la campa\u00f1a de phishing est\u00e1 bloqueada por los sistemas de seguridad de Microsoft (\u00a1Gracias!)<\/p>\r\n<hr \/>\r\n<h2><span class=\"ez-toc-section\" id=\"Outils_utilises\"><\/span>Herramientas utilizadas<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<ul>\r\n<li>Obviamente, utilizo el Microsoft 365 Tenant al que le pedir\u00e9 que autorice el env\u00edo de la IP de mi campa\u00f1a, as\u00ed como el famoso 5321.MailFrom (o remitente del sobre).<\/li>\r\n<\/ul>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ITFR-Blog-Microsoft-365-Cloud-01.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-6551\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ITFR-Blog-Microsoft-365-Cloud-01.jpg\" alt=\"\" width=\"269\" height=\"169\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ITFR-Blog-Microsoft-365-Cloud-01.jpg 800w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ITFR-Blog-Microsoft-365-Cloud-01-600x377.jpg 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ITFR-Blog-Microsoft-365-Cloud-01-300x189.jpg 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ITFR-Blog-Microsoft-365-Cloud-01-768x483.jpg 768w\" sizes=\"auto, (max-width: 269px) 100vw, 269px\" \/><\/a><\/p>\r\n<ul>\r\n<li>GoPhish en la versi\u00f3n 0.12.1 el d\u00eda de la escritura de este RetEx<\/li>\r\n<\/ul>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/maxresdefault.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-6549\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/maxresdefault.jpg\" alt=\"\" width=\"319\" height=\"157\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/maxresdefault.jpg 1134w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/maxresdefault-600x295.jpg 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/maxresdefault-300x147.jpg 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/maxresdefault-1024x503.jpg 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/maxresdefault-768x377.jpg 768w\" sizes=\"auto, (max-width: 319px) 100vw, 319px\" \/><\/a><\/p>\r\n<ul>\r\n<li>Plataforma AWS de Amazon y, m\u00e1s concretamente, instancias EC2<\/li>\r\n<\/ul>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/90905203-ebe5-4958-b728-4dd9a64c6d03.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-6550\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/90905203-ebe5-4958-b728-4dd9a64c6d03.png\" alt=\"\" width=\"400\" height=\"173\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/90905203-ebe5-4958-b728-4dd9a64c6d03.png 740w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/90905203-ebe5-4958-b728-4dd9a64c6d03-600x259.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/90905203-ebe5-4958-b728-4dd9a64c6d03-300x130.png 300w\" sizes=\"auto, (max-width: 400px) 100vw, 400px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_cree_un_compte_Amazon_AWS\"><\/span>Creo una cuenta de Amazon AWS\u00a0<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<ul>\r\n<li><a href=\"https:\/\/portal.aws.amazon.com\/billing\/signup#\/start\/email\" target=\"_blank\" rel=\"noopener\">https:\/\/portal.aws.amazon.com\/billing\/signup#\/start\/email<\/a><\/li>\r\n<\/ul>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6576\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws1.png\" alt=\"\" width=\"335\" height=\"337\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws1.png 335w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws1-100x100.png 100w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws1-298x300.png 298w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws1-150x150.png 150w\" sizes=\"auto, (max-width: 335px) 100vw, 335px\" \/><\/a><\/p>\r\n<p>Sigue los 5 pasos y luego:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-6577\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws2.png\" alt=\"\" width=\"323\" height=\"403\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws2.png 653w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws2-600x749.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws2-240x300.png 240w\" sizes=\"auto, (max-width: 323px) 100vw, 323px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-6578\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws3.png\" alt=\"\" width=\"335\" height=\"325\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws3.png 421w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws3-300x291.png 300w\" sizes=\"auto, (max-width: 335px) 100vw, 335px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_cree_une_instance_sur_EC2\"><\/span>Creo una instancia en EC2<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Todo lo que explico sobre esta parte es completamente gratuito, podemos beneficiarnos <a href=\"https:\/\/aws.amazon.com\/fr\/ec2\/pricing\/\" target=\"_blank\" rel=\"noopener\">de la licitaci\u00f3n de un a\u00f1o<\/a>, Eso es suficiente para mi necesidad.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2gratuite.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6553\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2gratuite.png\" alt=\"\" width=\"941\" height=\"377\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2gratuite.png 941w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2gratuite-600x240.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2gratuite-300x120.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2gratuite-768x308.png 768w\" sizes=\"auto, (max-width: 941px) 100vw, 941px\" \/><\/a><br \/>Debe haber creado una cuenta en AWS y luego ir a <a href=\"https:\/\/console.aws.amazon.com\/ec2\/v2\/home\" target=\"_blank\" rel=\"noopener\">Amazon EC2<\/a><\/p>\r\n<p><a href=\"https:\/\/console.aws.amazon.com\/ec2\/v2\/home\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-6554 size-full\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/demarrerec2.png\" alt=\"\" width=\"368\" height=\"58\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/demarrerec2.png 368w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/demarrerec2-300x47.png 300w\" sizes=\"auto, (max-width: 368px) 100vw, 368px\" \/><\/a><\/p>\r\n<p>En la parte superior derecha, compruebe que se encuentra en la regi\u00f3n de Europa\/Par\u00eds<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/awsparis.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7670\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/awsparis.png\" alt=\"\" width=\"351\" height=\"102\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/awsparis.png 351w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/awsparis-300x87.png 300w\" sizes=\"auto, (max-width: 351px) 100vw, 351px\" \/><\/a><\/p>\r\n<p>entonces<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6557\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2.png\" alt=\"\" width=\"394\" height=\"159\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2.png 394w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-300x121.png 300w\" sizes=\"auto, (max-width: 394px) 100vw, 394px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6558\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-3.png\" alt=\"\" width=\"858\" height=\"386\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-3.png 858w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-3-600x270.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-3-300x135.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-3-768x346.png 768w\" sizes=\"auto, (max-width: 858px) 100vw, 858px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-4.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6559\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-4.png\" alt=\"\" width=\"797\" height=\"753\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-4.png 797w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-4-600x567.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-4-300x283.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-4-768x726.png 768w\" sizes=\"auto, (max-width: 797px) 100vw, 797px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-5.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6560\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-5.png\" alt=\"\" width=\"787\" height=\"280\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-5.png 787w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-5-600x213.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-5-300x107.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-5-768x273.png 768w\" sizes=\"auto, (max-width: 787px) 100vw, 787px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-6.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6561\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-6.png\" alt=\"\" width=\"790\" height=\"248\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-6.png 790w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-6-600x188.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-6-300x94.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-6-768x241.png 768w\" sizes=\"auto, (max-width: 790px) 100vw, 790px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/cles2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6572\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/cles2.png\" alt=\"\" width=\"613\" height=\"657\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/cles2.png 613w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/cles2-600x643.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/cles2-280x300.png 280w\" sizes=\"auto, (max-width: 613px) 100vw, 613px\" \/><br \/><\/a>Descargo el archivo clave, tenga cuidado de tomar un archivo ppk y no pem.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-22.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6573\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-22.png\" alt=\"\" width=\"791\" height=\"788\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-22.png 791w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-22-300x300.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-22-100x100.png 100w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-22-600x598.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-22-150x150.png 150w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-22-768x765.png 768w\" sizes=\"auto, (max-width: 791px) 100vw, 791px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-89png.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6565\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-89png.png\" alt=\"\" width=\"789\" height=\"492\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-89png.png 789w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-89png-600x374.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-89png-300x187.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-89png-768x479.png 768w\" sizes=\"auto, (max-width: 789px) 100vw, 789px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-10png.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6566\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-10png.png\" alt=\"\" width=\"585\" height=\"115\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-10png.png 585w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/ec2-10png-300x59.png 300w\" sizes=\"auto, (max-width: 585px) 100vw, 585px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws4.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6579\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws4.png\" alt=\"\" width=\"318\" height=\"149\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws4.png 318w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws4-300x141.png 300w\" sizes=\"auto, (max-width: 318px) 100vw, 318px\" \/><\/a><\/p>\r\n<p>Una vez que todo est\u00e1 instalado y lanzado, tengo todo verde:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/instance.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6569\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/instance.png\" alt=\"\" width=\"962\" height=\"85\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/instance.png 962w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/instance-600x53.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/instance-300x27.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/instance-768x68.png 768w\" sizes=\"auto, (max-width: 962px) 100vw, 962px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_configure_le_groupe_de_securite_de_mon_instance\"><\/span>Configurar el grupo de seguridad de mi instancia<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Como medida de seguridad, ya he reservado el acceso SSH a mi \u00fanica direcci\u00f3n IP a trav\u00e9s del asistente de creaci\u00f3n de instancias, ahora necesito configurar los puertos que utilizar\u00e1 GoPhish.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws5.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6580\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws5.png\" alt=\"\" width=\"203\" height=\"203\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws5.png 203w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws5-100x100.png 100w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws5-150x150.png 150w\" sizes=\"auto, (max-width: 203px) 100vw, 203px\" \/><\/a><\/p>\r\n<p>Voy a Red y Seguridad y luego Grupos de Seguridad, selecciono el grupo de asistente de lanzamiento, reglas entrantes, modifico reglas entrantes<\/p>\r\n<p>Agrego una entrada TCP personalizada con un n\u00famero de puerto que no sea 3333 que ser\u00e1 el n\u00famero de puerto que usar\u00e9 para GoPhish, puse 8531 por ejemplo.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws6.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6581\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws6.png\" alt=\"\" width=\"1198\" height=\"286\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws6.png 1198w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws6-600x143.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws6-300x72.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws6-1024x244.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws6-768x183.png 768w\" sizes=\"auto, (max-width: 1198px) 100vw, 1198px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jutilise_une_Adresse_IP_Elastic_facultatif\"><\/span>Uso una direcci\u00f3n IP el\u00e1stica (opcional)<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Para tener siempre la misma direcci\u00f3n IP, utilizo esta funci\u00f3n.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws7.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6582\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws7.png\" alt=\"\" width=\"376\" height=\"225\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws7.png 376w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws7-300x180.png 300w\" sizes=\"auto, (max-width: 376px) 100vw, 376px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws8-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6584\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws8-1.png\" alt=\"\" width=\"747\" height=\"683\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws8-1.png 747w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws8-1-600x549.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws8-1-300x274.png 300w\" sizes=\"auto, (max-width: 747px) 100vw, 747px\" \/><\/a><\/p>\r\n<p><em>Tenga en cuenta que las direcciones IP el\u00e1sticas pagan cuando no est\u00e1n asociadas con una instancia en ejecuci\u00f3n. Esto significa que si reserva una direcci\u00f3n IP el\u00e1stica pero no la usa, se le cobrar\u00e1. Sin embargo, una vez que una direcci\u00f3n IP el\u00e1stica est\u00e1 asociada con una instancia en ejecuci\u00f3n, no se le cobrar\u00e1 mientras la instancia se est\u00e9 ejecutando y la direcci\u00f3n IP est\u00e9 asociada con esa instancia. Si la instancia se detiene o termina, a\u00fan se le puede cobrar por usar la direcci\u00f3n IP el\u00e1stica, a menos que la desvincule de la instancia o la libere.<\/em><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jinstalle_Putty\"><\/span>Instalo Putty\u00a0<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Putty me permitir\u00e1 conectarme en SSH a mi instancia EC2, esto de una manera segura con un conjunto de claves (privado \/ p\u00fablico).<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/putty1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6570\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/putty1.png\" alt=\"\" width=\"495\" height=\"387\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/putty1.png 495w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/putty1-300x235.png 300w\" sizes=\"auto, (max-width: 495px) 100vw, 495px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/putty2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6571\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/putty2.png\" alt=\"\" width=\"200\" height=\"92\" \/><\/a><\/p>\r\n<p>Necesito recuperar la configuraci\u00f3n de conexi\u00f3n en la instancia.<\/p>\r\n<p>Para ello, hago clic con el bot\u00f3n derecho en la instancia y, a continuaci\u00f3n, \u00ablog in\u00bb \/ SSH Client.<\/p>\r\n<p>Tomo nota del DNS p\u00fablico que se me da, me servir\u00e1 para el anfitri\u00f3n de Putty<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws10.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6585\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws10.png\" alt=\"\" width=\"411\" height=\"48\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws10.png 411w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws10-300x35.png 300w\" sizes=\"auto, (max-width: 411px) 100vw, 411px\" \/><\/a><\/p>\r\n<p>Lanzo Putty, agrego el Host:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws11.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6586\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws11.png\" alt=\"\" width=\"454\" height=\"444\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws11.png 454w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws11-300x293.png 300w\" sizes=\"auto, (max-width: 454px) 100vw, 454px\" \/><\/a><\/p>\r\n<p>a continuaci\u00f3n, especifique el archivo de clave privada creado anteriormente:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws12.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6587\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws12.png\" alt=\"\" width=\"457\" height=\"445\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws12.png 457w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws12-300x292.png 300w\" sizes=\"auto, (max-width: 457px) 100vw, 457px\" \/><\/a><\/p>\r\n<p>Para simplificarlo, agrego el usuario ubuntu como inicio de sesi\u00f3n autom\u00e1tico en Connection\/Data<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws13.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6588\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws13.png\" alt=\"\" width=\"457\" height=\"449\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws13.png 457w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/aws13-300x295.png 300w\" sizes=\"auto, (max-width: 457px) 100vw, 457px\" \/><\/a><\/p>\r\n<p>Empiezo la conexi\u00f3n, est\u00e1 bien, tengo la l\u00ednea de comandos Ubuntu.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jinstalle_GoPhish\"><\/span>Instalo GoPhish<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Voy a buscar la \u00faltima versi\u00f3n que necesita ser descargado en el <a href=\"https:\/\/github.com\/gophish\/gophish\/releases\">Depositario oficial de Github<\/a>.<\/p>\r\n<p>El d\u00eda que se cre\u00f3 este RetEx, la \u00faltima versi\u00f3n est\u00e1 aqu\u00ed:<br \/>https:\/\/github.com\/gophish\/gophish\/releases\/download\/v0.12.1\/gophish-v0.12.1-linux-64bit.zip<\/p>\r\n<p>En la l\u00ednea de comandos de Ubuntu, cargo el archivo zip y lo desempaqueto en opt\/:<\/p>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\">wget https:\/\/github.com\/gophish\/gophish\/releases\/download\/v0.12.1\/gophish-v0.12.1-linux-64bit.zip sudo apt install unzip unzip gophish-v0.12.1-linux-64bit.zip -d .\/gophish rm gophish-v0.12.1-linux-64bit.zip sudo chmod +x .\/gophish\/gophish<\/pre>\r\n<p data-enlighter-language=\"powershell\"><br \/>Tendr\u00e9 que configurar la IP gophish y su puerto.<br \/>Para ello, modifico el archivo config.json<br \/><br \/><\/p>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\">cd gophish vim config.json<\/pre>\r\n<p>Reemplazo 127.0.0.1:3333 por 0.0.0.0:8531 en la l\u00ednea listen_url<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/gophis1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6594\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/gophis1.png\" alt=\"\" width=\"400\" height=\"100\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/gophis1.png 400w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/gophis1-300x75.png 300w\" sizes=\"auto, (max-width: 400px) 100vw, 400px\" \/><\/a><\/p>\r\n<p>Lanzo gophish<\/p>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"powershell\">.\/gophish<\/pre>\r\n<p>Recibo un mensaje de error, probablemente seguridad al escuchar el puerto 80 por un usuario no root, r\u00e1pidamente trat\u00e9 de arreglar esto con ipfw pero no est\u00e1 en mi m\u00e1quina y con iptables, no ten\u00eda nada m\u00e1s satisfactorio. Es bastante feo y desaconsejable, pero como mi instancia de Ec2 no permanecer\u00e1 en producci\u00f3n, lanzo un:<\/p>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\">sudo .\/gophish<\/pre>\r\n<p>Muy bien, mi GoPhish es lanzado\u00a0<\/p>\r\n<p>en el texto de la l\u00ednea de comandos, recupero la contrase\u00f1a que se me dio en la l\u00ednea<\/p>\r\n<pre>Por favor, inicie sesi\u00f3n con el administrador de nombre de usuario y la contrase\u00f1a xxx<\/pre>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_souhaite_utiliser_Gophish_sans_garder_ma_fenetre_SSH_ouverte_facultatif\"><\/span>Quiero usar Gophish sin mantener mi ventana SSH abierta (opcional)<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Agrego este p\u00e1rrafo aqu\u00ed para mayor consistencia, pero se puede ejecutar m\u00e1s tarde cuando Gophish funcione manualmente.<\/p>\r\n<h4><span class=\"ez-toc-section\" id=\"Jautorise_le_lancement_de_Gophish_sans_etre_root_sudo\"><\/span>Autorizo el lanzamiento de Gophish sin ser root (sudo)<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<p>Para evitar tener que usar un comando <strong>sudo<\/strong> para lanzar Gophish, autorizar\u00e9 al usuario <strong>ubuntu<\/strong> para interactuar en el puerto 80, que es un puerto privilegiado. De hecho, la orden <strong>cap_net _bind _service<\/strong> permite a este ejecutable (gophish) vincular sockets de red a puertos con un n\u00famero menor o igual a 1024, incluso si no se ejecuta como usuario root.<\/p>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\">sudo setcap 'cap_net _bind _service=+ep' \/home\/ubuntu\/gophish\/gophish<\/pre>\r\n<p>Por lo tanto, a partir de ahora, no es necesario escribir sudo para lanzar gophish, el comando puede ser:<\/p>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\">.\/gophish<\/pre>\r\n<h4 class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\"><span class=\"ez-toc-section\" id=\"Message_derreur_open_gophish_adminkey_permission_denied\"><\/span><br \/>Abra el mensaje de error gophish_admin.key:\u00a0permiso denegado<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<p>Si aparece este mensaje de error, debe cambiar los permisos del archivo gophish_admin.key<\/p>\r\n<p>Aqu\u00ed est\u00e1n los pedidos:<\/p>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"shell\">cd ~\/gophish ls -l gophish_admin.key sudo chmod 644 gophish_admin.key sudo chown ubuntu:ubuntu gophish_admin.key ls -l gophish_admin.key .\/gophish\r\n<\/pre>\r\n<p>\u00a0<\/p>\r\n<h4><span class=\"ez-toc-section\" id=\"Je_declare_gophish_comme_un_service\"><\/span>Declaro el gophish como un servicio<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<p>Voy a a\u00f1adir un archivo <strong>gophish.service<\/strong> en \/etc\/systemd\/system\/gophish.service<\/p>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\">[Unidad] Descripci\u00f3n=GoPhish Service After=network.target [Servicio] ExecStart=\/home\/ubuntu\/gophish\/gophish Type=simple PIDFile=\/var\/run\/gophish User=ubuntu WorkingDirectory=\/home\/ubuntu\/gophish [Instalar] WantedBy=default.target<\/pre>\r\n<p>Para no tener que escribir todo, puse esto en una esencia, para recuperarlo directamente:<\/p>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\">sudo wget https:\/\/gist.githubusercontent.com\/sigalou\/267349eada979e07c99dc5944253169c\/raw\/e5d8769bb86b40e15ad0c4631629d575e440199a\/gophish.service -O \/etc\/systemd\/system\/gophish.service<\/pre>\r\n<p>Esto puede ser probado por:<\/p>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\">sudo systemctl daemon-reload sudo systemctl enable gophish sudo systemctl start gophish sudo systemctl status gophish<\/pre>\r\n<p>Relanzo mi cuerpo, est\u00e1 bien, Gophish se inicia autom\u00e1ticamente.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_lance_GoPhish\"><\/span>Voy a lanzar GoPhish.<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>De vuelta en mi navegador, noto la ip el\u00e1stica o la ip p\u00fablica de la instancia, pego esta direcci\u00f3n seguida de:8531 que es el puerto definido anteriormente<\/p>\r\n<p>As\u00ed que voy por ejemplo a https:\/\/13.36.81.72:8531<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-6603\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go1.png\" alt=\"\" width=\"243\" height=\"253\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go1.png 456w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go1-289x300.png 289w\" sizes=\"auto, (max-width: 243px) 100vw, 243px\" \/><\/a><\/p>\r\n<p>Aqu\u00ed usamos \"admin\" y la contrase\u00f1a registrada en la l\u00ednea de comandos en el momento del lanzamiento. Inmediatamente GoPhish pide cambiar la contrase\u00f1a y estamos conectados a GoPhish.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-6604\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go2.png\" alt=\"\" width=\"582\" height=\"268\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go2.png 1395w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go2-600x277.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go2-300x138.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go2-1024x472.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go2-768x354.png 768w\" sizes=\"auto, (max-width: 582px) 100vw, 582px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jajoute_un_utilisateur_%C2%AB_piegeur_%C2%BB_sur_le_Tenant_365\"><\/span>Estoy a\u00f1adiendo un usuario \u00abtrapper\u00bb al Inquilino 365<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Al iniciar sesi\u00f3n como administrador con el derecho de administrar usuarios, agrego un nuevo usuario.<\/p>\r\n<p>Eleg\u00ed usar un usuario que compongo como si fuera una cuenta oficial de Microsoft Account Management.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6607\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-1.png\" alt=\"\" width=\"742\" height=\"288\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-1.png 742w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-1-600x233.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-1-300x116.png 300w\" sizes=\"auto, (max-width: 742px) 100vw, 742px\" \/><\/a><\/p>\r\n<p>Incluso le puse un bonito logo que es serio.<\/p>\r\n<p>Por supuesto, le asigno una licencia que le permite tener una cuenta de correo electr\u00f3nico y luego voy a la <strong>Correo<\/strong> de este usuario entonces<strong> Software de correo<\/strong> y voy a marcar al menos la casilla <strong>SMTP autenticado<\/strong>.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-6608\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-2.png\" alt=\"\" width=\"462\" height=\"284\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-2.png 711w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-2-600x369.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-2-300x184.png 300w\" sizes=\"auto, (max-width: 462px) 100vw, 462px\" \/><\/a><\/p>\r\n<p>(Opcional) Para hacer mi vida m\u00e1s f\u00e1cil y no tener que agregar esta casilla a la carta, puse una transferencia de todos los correos electr\u00f3nicos recibidos en esta casilla a mi direcci\u00f3n de correo electr\u00f3nico en Correo \/ Correo de transferencia.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_configure_Microsoft_Defender_pour_autoriser_GoPhish\"><\/span>Configurar Microsoft Defender para permitir GoPhish<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Microsoft lo ha planeado todo. Pensaron en ofrecer una campa\u00f1a educativa de phishing (licencia de Defender Plan 2) con una licencia pagada, pero tambi\u00e9n pensaron en hackers sin dinero al permitirles autorizar esto manualmente.<\/p>\r\n<p>Estoy lanzando <a href=\"https:\/\/security.microsoft.com\/\" target=\"_blank\" rel=\"noopener\">Microsoft Defender<\/a>.<\/p>\r\n<p>Entonces <strong>Estrategias y reglas<\/strong><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6609\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-3.png\" alt=\"\" width=\"295\" height=\"127\" \/><\/a><\/p>\r\n<p>Entonces <strong>Estrategias de Amenazas\/Descuento Avanzado<\/strong><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-4.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-6610\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-4.png\" alt=\"\" width=\"486\" height=\"345\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-4.png 1008w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-4-600x426.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-4-300x213.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-4-768x545.png 768w\" sizes=\"auto, (max-width: 486px) 100vw, 486px\" \/><\/a><\/p>\r\n<p>Y finalmente Tab <strong>Simulaci\u00f3n de phishing<\/strong><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-5.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6611\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-5.png\" alt=\"\" width=\"520\" height=\"228\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-5.png 520w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-5-300x132.png 300w\" sizes=\"auto, (max-width: 520px) 100vw, 520px\" \/><\/a><\/p>\r\n<p>Gracias Sigalou!!! Tuvimos que encontrar esta pesta\u00f1a\u00a0<\/p>\r\n<p>Entonces usted tiene que configurar el <strong>campo<\/strong> y <strong>el PI<\/strong>.<\/p>\r\n<p>El dominio es la direcci\u00f3n del dominio que enviar\u00e1 el correo electr\u00f3nico, esto corresponde al dominio de SMTP From que especificar\u00e9 en GoPhish.<\/p>\r\n<p>La IP es la IP el\u00e1stica o p\u00fablica de la instancia.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-6.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6612\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-6.png\" alt=\"\" width=\"547\" height=\"372\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-6.png 547w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/365-6-300x204.png 300w\" sizes=\"auto, (max-width: 547px) 100vw, 547px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_configure_le_SMTP_de_GoPhish\"><\/span>Configurar GoPhish SMTP<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6613\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-1.png\" alt=\"\" width=\"787\" height=\"396\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-1.png 787w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-1-600x302.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-1-300x151.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-1-768x386.png 768w\" sizes=\"auto, (max-width: 787px) 100vw, 787px\" \/><\/a><\/p>\r\n<p>De vuelta en GoPhish, voy a <strong>Env\u00edo de perfiles<\/strong> y crear\u00e9 un perfil para enviar mensajes:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6614\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-2.png\" alt=\"\" width=\"704\" height=\"647\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-2.png 704w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-2-600x551.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-2-300x276.png 300w\" sizes=\"auto, (max-width: 704px) 100vw, 704px\" \/><\/a><\/p>\r\n<p>Gracias al bot\u00f3n <strong>Enviar correo electr\u00f3nico de prueba<\/strong>, puedo comprobar que todo funciona a la perfecci\u00f3n, recibo un mensaje<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6615\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-3.png\" alt=\"\" width=\"683\" height=\"90\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-3.png 683w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-3-600x79.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-3-300x40.png 300w\" sizes=\"auto, (max-width: 683px) 100vw, 683px\" \/><\/a><\/p>\r\n<p>A estas alturas, ya es una muy buena victoria personal, he podido configurar una m\u00e1quina virtual, instalar GoPhish, configurarla, averiguar c\u00f3mo no quedarme atascado por la seguridad de Microsoft permitiendo esta manipulaci\u00f3n y ganar \u2026 llega el email de prueba!!! Para aquellos que est\u00e1n descubriendo mi RetEx, no imaginen que tom\u00f3 tiempo escribir esta p\u00e1gina, son horas de manipulaci\u00f3n (y aprendizaje).<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_vais_recuperer_tous_les_utilisateurs_du_Tenant_Microsoft_365\"><\/span>Voy a recuperar a todos los usuarios del Tenant Microsoft 365<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Dos formas de recuperar usuarios, la m\u00e1s sencilla con la interfaz gr\u00e1fica del centro de administraci\u00f3n M365, de lo contrario esto se puede hacer con un comando powershell.<\/p>\r\n<p>No voy a explicar esta segunda forma de hacer las cosas, <a href=\"https:\/\/www.it-connect.fr\/author\/florian\/\" target=\"_blank\" rel=\"noopener\">Florian<\/a> lo explic\u00f3 en su <a href=\"https:\/\/www.it-connect.fr\/comment-creer-une-campagne-de-phishing-avec-gophish\/#A_Creation_des_utilisateurs_et_des_groupes\" target=\"_blank\" rel=\"noopener\">excelente tutorial<\/a>.<\/p>\r\n<p>Tomo la f\u00f3rmula m\u00e1s simple, voy al panel de administraci\u00f3n y luego <strong>Usuarios activos<\/strong> entonces <strong>Usuarios de exportaci\u00f3n<\/strong>.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-10.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6627\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-10.png\" alt=\"\" width=\"1382\" height=\"234\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-10.png 1382w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-10-600x102.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-10-300x51.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-10-1024x173.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-10-768x130.png 768w\" sizes=\"auto, (max-width: 1382px) 100vw, 1382px\" \/><\/a><\/p>\r\n<p>La exportaci\u00f3n va bien, trabajo un poco en el archivo en Excel para eliminar columnas y filas innecesarias que no son usuarios. As\u00ed que tengo un archivo de Excel perfecto con 4 columnas, inicio un registro CSV con una coma en separador para poder importar en GoPhish.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-11-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6629\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-11-1.png\" alt=\"\" width=\"686\" height=\"127\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-11-1.png 686w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-11-1-600x111.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-11-1-300x56.png 300w\" sizes=\"auto, (max-width: 686px) 100vw, 686px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jinjecte_les_utilisateurs_dans_un_groupe_GoPhish\"><\/span>Inyecto usuarios en un grupo GoPhish<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-4.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-6618\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-4.png\" alt=\"\" width=\"513\" height=\"243\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-4.png 756w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-4-600x284.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-4-300x142.png 300w\" sizes=\"auto, (max-width: 513px) 100vw, 513px\" \/><\/a><\/p>\r\n<p>A\u00f1ado un nuevo grupo, empiezo a importar mi archivo CSV.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-12.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6631\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-12.png\" alt=\"\" width=\"650\" height=\"93\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-12.png 650w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-12-600x86.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-12-300x43.png 300w\" sizes=\"auto, (max-width: 650px) 100vw, 650px\" \/><\/a><\/p>\r\n<p>\u00a1Ahora tengo un nuevo grupo listo!<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-13.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6632\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-13.png\" alt=\"\" width=\"597\" height=\"213\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-13.png 597w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-13-300x107.png 300w\" sizes=\"auto, (max-width: 597px) 100vw, 597px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_configure_le_mail_de_phishing\"><\/span>Configurar el correo de phishing<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-5.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-6622\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-5.png\" alt=\"\" width=\"527\" height=\"229\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-5.png 920w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-5-600x261.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-5-300x130.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-5-768x334.png 768w\" sizes=\"auto, (max-width: 527px) 100vw, 527px\" \/><\/a><\/p>\r\n<p>Este es el correo electr\u00f3nico que recibir\u00e1n los destinatarios de la campa\u00f1a.<\/p>\r\n<p>Para hacer esto, le ped\u00ed a Microsoft que me enviara un mensaje, as\u00ed que mantuve el formato del mensaje. Al final, esto da:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-6.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6623\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-6.png\" alt=\"\" width=\"1187\" height=\"646\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-6.png 1187w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-6-600x327.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-6-300x163.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-6-1024x557.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-6-768x418.png 768w\" sizes=\"auto, (max-width: 1187px) 100vw, 1187px\" \/><\/a><\/p>\r\n<p>Me gustar\u00eda se\u00f1alar que es pedag\u00f3gico, no me preguntes el c\u00f3digo HTML de la p\u00e1gina, considero que depende de todos hacer el trabajo.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_configure_la_page_de_hameconnage\"><\/span>Configurar la p\u00e1gina de phishing<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-7.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-6624\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-7.png\" alt=\"\" width=\"506\" height=\"215\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-7.png 933w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-7-600x255.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-7-300x128.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-7-768x327.png 768w\" sizes=\"auto, (max-width: 506px) 100vw, 506px\" \/><\/a><\/p>\r\n<p>Llamada Landing page, esta p\u00e1gina de phishing es la p\u00e1gina en la que aterrizar\u00e1 el usuario al hacer clic en el enlace que se le ofrece en el correo electr\u00f3nico que recibi\u00f3.<\/p>\r\n<p>Fui a buscar modelos para no reinventar el agua caliente (gracias souleiman)<\/p>\r\n<p>Aqu\u00ed est\u00e1 el mejor enlace que podr\u00eda usar para hacer que la p\u00e1gina de inicio de sesi\u00f3n de M365 sea lo m\u00e1s realista posible.<\/p>\r\n<ul>\r\n<li><a href=\"https:\/\/github.com\/brunobotelhobr\/My-Gophish-Templates\" target=\"_blank\" rel=\"noopener\">https:\/\/github.com\/brunobotelhobr\/My-Gophish-Templates<\/a><\/li>\r\n<\/ul>\r\n<p>Estoy pensando en el final de la configuraci\u00f3n de la p\u00e1gina de destino para comprobar la recuperaci\u00f3n del correo electr\u00f3nico y la contrase\u00f1a. Tengo la idea de poder mostrar los dos primeros caracteres, por ejemplo, y la \u00faltima de las contrase\u00f1as \u00abrobadas\u00bb durante la formaci\u00f3n o sensibilizaci\u00f3n de los usuarios. Tenga en cuenta que las contrase\u00f1as recuperadas se dan en claro, por lo que desencadenar\u00e9 un cambio de todas las contrase\u00f1as de todos los usuarios unos d\u00edas despu\u00e9s de la campa\u00f1a de phishing educativo.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-9.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6626\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-9.png\" alt=\"\" width=\"700\" height=\"337\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-9.png 700w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-9-600x289.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-9-300x144.png 300w\" sizes=\"auto, (max-width: 700px) 100vw, 700px\" \/><\/a><\/p>\r\n<p>Cuando el usuario hace clic en el enlace <span style=\"text-decoration: underline;\">reconectar<\/span> o en el bot\u00f3n azul Reconectar, aterriza en:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-8.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6625\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-8.png\" alt=\"\" width=\"1374\" height=\"690\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-8.png 1374w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-8-600x301.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-8-300x151.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-8-1024x514.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-8-768x386.png 768w\" sizes=\"auto, (max-width: 1374px) 100vw, 1374px\" \/><\/a><\/p>\r\n<p>No me pidas el c\u00f3digo HTML de esta p\u00e1gina.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_lance_la_campagne_dhameconnage\"><\/span>Lanzo la campa\u00f1a de phishing<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>En resumen, he creado un grupo de usuarios, una plantilla de correo electr\u00f3nico, una p\u00e1gina de phishing, para que pueda ir a Campa\u00f1as para lanzar la campa\u00f1a.<br \/><br \/><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-14.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6636\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-14.png\" alt=\"\" width=\"705\" height=\"777\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-14.png 705w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-14-600x661.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/go-14-272x300.png 272w\" sizes=\"auto, (max-width: 705px) 100vw, 705px\" \/><\/a><\/p>\r\n<p>A la hora de presionar Campa\u00f1a de Lanzamiento, los emails salen de \u2026<\/p>\r\n<p><a style=\"display: inline !important;\" href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/61464919-mise-en-page-de-conception-de-vecteur-creatif-abstrait-avec-texte-attendre-et-voir-arriere-plan.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-6637\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/61464919-mise-en-page-de-conception-de-vecteur-creatif-abstrait-avec-texte-attendre-et-voir-arriere-plan.jpg\" alt=\"\" width=\"191\" height=\"191\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/61464919-mise-en-page-de-conception-de-vecteur-creatif-abstrait-avec-texte-attendre-et-voir-arriere-plan.jpg 1300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/61464919-mise-en-page-de-conception-de-vecteur-creatif-abstrait-avec-texte-attendre-et-voir-arriere-plan-300x300.jpg 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/61464919-mise-en-page-de-conception-de-vecteur-creatif-abstrait-avec-texte-attendre-et-voir-arriere-plan-100x100.jpg 100w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/61464919-mise-en-page-de-conception-de-vecteur-creatif-abstrait-avec-texte-attendre-et-voir-arriere-plan-600x600.jpg 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/61464919-mise-en-page-de-conception-de-vecteur-creatif-abstrait-avec-texte-attendre-et-voir-arriere-plan-1024x1024.jpg 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/61464919-mise-en-page-de-conception-de-vecteur-creatif-abstrait-avec-texte-attendre-et-voir-arriere-plan-150x150.jpg 150w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/04\/61464919-mise-en-page-de-conception-de-vecteur-creatif-abstrait-avec-texte-attendre-et-voir-arriere-plan-768x768.jpg 768w\" sizes=\"auto, (max-width: 191px) 100vw, 191px\" \/><\/a><\/p>\r\n<div class=\"mceTemp\">\u00a0<\/div>\r\n<p>Regresar\u00e9 en un rato para dar noticias de la campa\u00f1a aqu\u00ed \u2026<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Bibliographie\"><\/span>Bibliograf\u00eda<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<ul>\r\n<li><a href=\"https:\/\/www.it-connect.fr\/comment-creer-une-campagne-de-phishing-avec-gophish\" target=\"_blank\" rel=\"noopener\">https:\/\/www.it-connect.fr\/comment-creer-une-campagne-de-phishing-avec-gophish<\/a><\/li>\r\n<li><a href=\"https:\/\/dazzyddos.github.io\/posts\/Automating-Phishing-Infrastructure-with-terraform-on-AWS\/\" target=\"_blank\" rel=\"noopener\">https:\/\/dazzyddos.github.io\/posts\/Automating-Phishing-Infrastructure-with-terraform-on-AWS\/<\/a><\/li>\r\n<li><a href=\"https:\/\/clement-bouder.fr\/Creer-une-infrastructure-de-phishing\/\" target=\"_blank\" rel=\"noopener\">https:\/\/clement-bouder.fr\/Creer-une-infrastructure-de-phishing\/<\/a><\/li>\r\n<li><a href=\"https:\/\/www.youtube.com\/watch?v=Tdpzi8M3Vtw\" target=\"_blank\" rel=\"noopener\">https:\/\/www.youtube.com\/watch?v=Tdpzi8M3Vtw<\/a><\/li>\r\n<li><a href=\"https:\/\/medium.com\/@immure\/setting-up-gophish-on-aws-c2f2fd78b7e9\" target=\"_blank\" rel=\"noopener\">https:\/\/medium.com\/@immure\/setting-up-gophish-on-aws-c2f2fd78b7e9<\/a><\/li>\r\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>Mi objetivo Con el fin de sensibilizar a los usuarios del inquilino de Microsoft 365 que utilizo, mir\u00e9 c\u00f3mo crear una campa\u00f1a de phishing para \u00abatraparlos\u00bb y activar la formaci\u00f3n sobre este tema. Los mensajes de prevenci\u00f3n y las campa\u00f1as de higiene digital no son suficientes, se necesita un hecho concreto para intentar desencadenar una captura [\u2026]<\/p>","protected":false},"author":1,"featured_media":6746,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[70,166],"tags":[50,73],"class_list":["post-6547","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurite","category-retex","tag-50","tag-gophish"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/posts\/6547","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/comments?post=6547"}],"version-history":[{"count":0,"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/posts\/6547\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/media\/6746"}],"wp:attachment":[{"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/media?parent=6547"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/categories?post=6547"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/es\/wp-json\/wp\/v2\/tags?post=6547"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}