Kukhazikitsa GoPhish pa Msika wa AWS: Chitsogozo cha Gawo ndi Gawo

Introduction

Hailbytes imapereka chida chosangalatsa chomwe chimadziwika kuti GoPhish kuthandiza mabizinesi kuyesa makina awo otetezera maimelo. GoPhish ndi chida chowunikira chitetezo chopangidwira phishing makampeni omwe mabungwe angagwiritse ntchito pophunzitsa antchito awo kuzindikira ndi kukana ziwawa zoterezi. Cholemba chabuloguchi chidzakuwongolerani momwe mungapezere GoPhish pa Msika wa AWS, lembani zoperekedwa, yambitsani chitsanzo, ndikulumikizana ndi admin console kuti muyambe kugwiritsa ntchito chida chabwino kwambirichi.

Momwe Mungapezere ndikulembetsa ku GoPhish pa AWS Marketplace

Gawo loyamba pakukhazikitsa GoPhish ndikulipeza pa AWS Marketplace. Kuti muchite izi, tsatirani izi:

  1. Pitani ku AWS Marketplace ndikufufuza "GoPhish" mu bar yofufuzira.
  2. Yang'anani mndandanda wochokera ku Hailbytes, womwe uyenera kuwoneka ngati zotsatira zoyamba.
  3. Dinani pa batani la "Pitirizani Kulembetsa" kuti muvomereze zoperekazo. Mutha kusankha kulembetsa ola lililonse kwa $ 0.50 pa ola limodzi kapena kupita ku mgwirizano wapachaka ndikusunga 18%.

Mukalembetsa bwino pulogalamuyo, mutha kuyikonza kuchokera pagawo lokonzekera. Mutha kusiya zosintha zambiri momwe zilili, kapena mutha kusintha chigawocho kukhala malo ofikira pafupi ndi inu kapena komwe mudzakhala mukuyendetsa zoyeserera zanu.

Momwe Mungayambitsire GoPhish Instance Yanu

Mukamaliza kulembetsa ndi kasinthidwe, ndi nthawi yoti mutsegule chitsanzo chanu cha GoPhish potsatira izi:

  1. Dinani pa Launch kuchokera patsamba batani patsamba lopambana lolembetsa.
  2. Onetsetsani kuti muli ndi VPC yokhazikika yomwe ili ndi mayina amtundu wa DNS ndi subnet yomwe ili ndi IPv4. Ngati simutero, muyenera kuzipanga.
  3. Mukakhala ndi VPC yokhazikika, sinthani makonda a VPC ndikuyambitsa mayina a DNS host.
  4. Pangani subnet kuti muyanjane ndi VPC. Onetsetsani kuti mwatsegula maadiresi amtundu wa IPv4 pazigawo za subnet.
  5. Pangani chipata cha intaneti cha VPC yanu, ikanikizani ku VPC, ndikuwonjezera njira yopita pachipata cha intaneti patebulo lanjira.
  6. Pangani gulu latsopano lachitetezo kutengera zokonda za ogulitsa ndikusunga.
  7. Sinthani kukhala makiyi omwe mumakonda kugwiritsa ntchito kapena kupanga makiyi atsopano.
  8. Mukamaliza masitepe awa, mutha kuyambitsa chitsanzo chanu.

Momwe Mungalumikizire ku GoPhish Instance Yanu

Kuti mulumikizane ndi chitsanzo chanu cha GoPhish, tsatirani izi:

  1. Lowani muakaunti yanu ya AWS ndikupita ku dashboard ya EC2.
  2. Dinani pa Instances ndikuyang'ana chitsanzo chanu chatsopano cha GoPhish.
  3. Lembani ID yanu yachitsanzo, yomwe ili pansi pa gawo la Instance ID.
  4. Onetsetsani kuti chochitika chanu chikuyenda bwino popita ku Status Checks tabu ndikutsimikizira kuti yadutsa macheke awiri adongosolo.
  5. Tsegulani terminal ndikulumikiza chitsanzocho poyendetsa lamulo la "ssh -i 'path/to/your/keypair.pem' ubuntu@instance-id".
  6. Tsopano mutha kulumikizana ndi admin yanu polowetsa adilesi ya IP yapagulu lanu mu msakatuli wanu.

Kukhazikitsa seva yanu ya SMTP ndi Amazon SES

Ngati mulibe seva yanu ya SMTP, mutha kugwiritsa ntchito Amazon SES ngati seva yanu ya SMTP. SES ndi ntchito yotumiza maimelo yotsika mtengo komanso yotsika mtengo yomwe ingagwiritsidwe ntchito kutumiza maimelo ochita malonda ndi malonda. SES itha kugwiritsidwanso ntchito ngati seva ya SMTP ya Go Phish.

Kuti mukhazikitse SES, muyenera kupanga akaunti ya SES ndikutsimikizira imelo yanu kapena domeni. Mukachita izi, mutha kugwiritsa ntchito zoikamo za SMTP zomwe tafotokoza pamwambapa kuti mukonze chitsanzo chanu cha Go Phish kuti mugwiritse ntchito SES ngati seva yanu ya SMTP.

Zokonda za SMTP

Mutakhazikitsa chitsanzo chanu ndikupeza admin console, mungafune kukonza makonda anu a SMTP. Izi zikuthandizani kuti mutumize maimelo kuchokera pamwambo wanu wa Go Phish. Kuti muchite izi, pitani ku tabu ya "Sending Profiles" mu admin console.

M'gawo lotumiza mbiri, mutha kuyika zambiri za seva yanu ya SMTP, kuphatikiza dzina la olandila kapena adilesi ya IP ya seva yanu ya SMTP, nambala ya doko, ndi njira yotsimikizira. Ngati mukugwiritsa ntchito Amazon SES ngati seva yanu ya SMTP, mutha kugwiritsa ntchito makonda awa:

  • Dzina la alendo: email-smtp.us-west-2.amazonaws.com (m'malo mwa us-west-2 ndi dera lomwe mudayikirako akaunti yanu ya SES)
  • Port: 587
  • Njira yotsimikizira: Lowani
  • Username: dzina lanu lolowera la SES SMTP
  • Achinsinsi: mawu anu achinsinsi a SES SMTP

Kuti muyese zokonda zanu za SMTP, mutha kutumiza imelo yoyesera ku adilesi yotchulidwa. Izi zidzatsimikizira kuti zokonda zanu ndi zolondola komanso kuti mutha kutumiza maimelo kuchokera pamwambo wanu.

Kuchotsa zoletsa kutumiza maimelo

Mwachikhazikitso, zochitika za EC2 zimakhala ndi zoletsa maimelo omwe akutuluka kuti ateteze sipamu. Komabe, zoletsa izi zitha kukhala zovuta ngati mukugwiritsa ntchito chitsanzo chanu potumiza maimelo ovomerezeka, monga ndi Go Phish.

Kuti muchotse zoletsa izi, muyenera kuchita masitepe angapo. Choyamba, muyenera kupempha kuti akaunti yanu ichotsedwe pamndandanda wa "Amazon EC2 sending limits". Mndandandawu umachepetsa kuchuluka kwa maimelo omwe angatumizidwe kuchokera patsamba lanu patsiku.

Kenako, muyenera kukonza chitsanzo chanu kuti mugwiritse ntchito imelo yotsimikizika kapena domeni mugawo la "Kuchokera" la maimelo anu. Izi zitha kuchitika mu gawo la "Imelo Templates" la admin console. Pogwiritsa ntchito imelo kapena domeni yotsimikizika, mudzawonetsetsa kuti maimelo anu atumizidwa kumabokosi obwera kudzawalandira.

Kutsiliza

M'nkhaniyi, tidafotokoza zoyambira kukhazikitsa Go Phish pa AWS Marketplace. Tidakambirana za momwe mungapezere ndikulembetsa ku Go Phish, momwe mungayambitsire chitsanzo chanu, momwe mungapezere dashboard ya EC2 kuti muwone thanzi lanu, komanso momwe mungalumikizire ndi admin console.

Tidafunsanso mafunso wamba potumiza maimelo, kuphatikiza momwe mungasinthire zosintha zanu za SMTP, kuchotsa zoletsa zotumizira maimelo, ndikukhazikitsa seva yanu ya SMTP ndi Amazon SES.

ndi mudziwe, muyenera kukhazikitsa bwino ndikusintha Go Phish pa AWS Marketplace, ndikuyamba kugwiritsa ntchito ziwonetsero zachinyengo kuti muyese ndikuwongolera chitetezo cha bungwe lanu.