removing Gophish indictors from the default installation:
Change default password
Default username is ‘admin’ and password ‘gophish’. CHANGE THIS
Replace GoPhish headers
find . -type f -exec sed -i.bak 's/X-Gophish-Contact/X-Contact/g' {} +
find . -type f -exec sed -i.bak 's/X-Gophish-Signature/X-Signature/g' {} +
Replace ServerName Parameter
modify the ServerName parameter under the /gophish/config/config.go
file path as follows:
# From
const ServerName = "gophish"
# To
const ServerName = "IGNORE"
Change RID
Change the default rid to something that is more suitable to the context
Change the value of RecipientParameter
in https://github.com/gophish/gophish/blob/master/models/campaign.go#L130
Change default 404 page
Gophish returns a generic 404 page if a request is to be made under the parent domain.
Credit:
https://outpost24.com/blog/Better-proxy-than-story
https://www.blackhillsinfosec.com/wp-content/uploads/2021/03/SLIDES_OPSECFundamentalsRemoteRedTeams-1.pdf