Gophish-NG

Gophish-NG is an actively maintained fork of Gophish, the widely used, battle-tested open-source phishing toolkit for pentesters and businesses running real-world phishing simulations and security awareness training.

Alongside everything Gophish already does well — landing pages, email templates, target groups, sending profiles, and per-recipient tracking through a single web UI — Gophish-NG adds features upstream lacks: teams for shared campaigns and assets, a read-only auditor role, OAuth 2.0 for IMAP email reporting, SMTP CC with per-profile send rates, and tags for categorizing and filtering your content. It also modernizes the dependency and toolchain foundation underneath, with real, verified security fixes along the way. See What is Gophish? for the full rationale, or jump straight to Installation to get running.

This user guide introduces Gophish-NG and shows how to use the software, building a complete campaign from start to finish.