mirror of
https://github.com/secureworks/squarephish
synced 2026-06-08 17:22:29 +00:00
Nevada Romsdahl
9fe299faeb
- Move away from embedding QR code as Base64 blob and switch to inline attachment - Support SSL, TLS, and no protocol for SMTP connections - Support no creds provided for anonymous SMTP auth
26 lines
3.0 KiB
Plaintext
26 lines
3.0 KiB
Plaintext
[DEFAULT]
|
|
SMTP_PORT = 465 # SMTP port, defaulted to 465
|
|
SMTP_SERVER = "smtp.gmail.com" # SMTP server, defaulted to GMail
|
|
SMTP_PROTO = "ssl" # SMTP protocol: {ssl, tls, None (leave empty)}
|
|
SMTP_EMAIL = "" # Provide authenticating email address here
|
|
SMTP_PASSWORD = "" # Provide authenticating password here
|
|
|
|
[EMAIL]
|
|
SQUAREPHISH_SERVER = "" # Required: Provide IP address/domain name of hosted SquarePhish server
|
|
SQUAREPHISH_PORT = 8443 # Hosted SquarePhish server port, defaulted to 8443 (this should match the below server value)
|
|
SQUAREPHISH_ENDPOINT = "/mfa" # Hosted SquarePhish endpoint to trigger OAuth Device Code flow, defaulted to an MFA pretext (this should match the below server value)
|
|
FROM_EMAIL = "admin@square.phish" # Default FROM address when sending an email
|
|
SUBJECT = "ACTION REQUIRED: Multi-Factor Authentication (MFA) Update" # Default SUBJECT when sending an email, defauled to an MFA pretext
|
|
EMAIL_TEMPLATE = "pretexts/mfa/qrcode_email.html" # Email body template for QR code email to victim
|
|
|
|
[SERVER]
|
|
PORT = 8443
|
|
FROM_EMAIL = "admin@square.phish" # Default FROM address when sending an email
|
|
SUBJECT = "ACTION REQUIRED: Multi-Factor Authentication (MFA) Update" # Default SUBJECT when sending an email, defauled to an MFA pretext
|
|
CLIENT_ID = "4813382a-8fa7-425e-ab75-3b753aab3abb" # Authenticating client ID, defaulted to Microsoft Authenticator App
|
|
ENDPOINT = "/mfa" # Hosted endpoint to trigger OAuth Device Code flow, defaulted to an MFA pretext
|
|
CERT_CRT = "" # Server SSL certificate .crt file
|
|
CERT_KEY = "" # Server SSL certificate .key file
|
|
EMAIL_TEMPLATE = "pretexts/mfa/devicecode_email.html" # Email body template for device code email to victim
|
|
PERMISSION_SCOPE = ".default offline_access profile openid" # OAuth permission scope - https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent
|