Fa'atūina le GoPhish i luga ole AWS Maketi: Ta'iala La'asaga i lea Laasaga
faʻatomuaga
Ua ofoina mai e Hailbytes se meafaigaluega fa'afiafia e ta'ua o le GoPhish e fesoasoani ai i pisinisi i le su'eina o latou faiga fa'akomupiuta imeli. GoPhish ose mea faigaluega su'esu'e saogalemu ua fuafuaina mo fatufatu fa'asalalauga e mafai ona fa'aoga e fa'alapotopotoga e toleni ai a latou tagata faigaluega ina ia iloa ma tetee atu i ia osofa'iga. O lenei blog post o le a taʻitaʻia oe ile auala e suʻe ai GoPhish ile AWS Marketplace, lesitala ile ofo, faʻalauiloa se faʻataʻitaʻiga, ma faʻafesoʻotaʻi i le admin console e amata faʻaaoga lenei meafaigaluega sili ona lelei.
Fa'afefea ona Su'e ma Fa'asoa ile GoPhish ile AWS Maketi
O le laasaga muamua i le faʻatulagaina o GoPhish o le suʻeina lea i luga o le AWS Marketplace. Ina ia faia, mulimuli i laasaga nei:
- Alu ile AWS Marketplace ma su'e le "GoPhish" ile pusa su'esu'e.
- Vaavaai mo le lisi mai Hailbytes, lea e tatau ona aliali mai o le iʻuga muamua.
- Kiliki i le "Continue to Subscribe" button e talia ai le ofo. E mafai ona e filifili e lesitala i itula taitasi mo le $0.50 i le itula pe alu mo se konekarate faaletausaga ma sefe 18%.
O le taimi lava e te lesitala ai ma le manuia i le polokalama, e mafai ona e faʻapipiʻiina mai le faʻamaufaʻailoga faʻamau. E mafai ona e tu'ua le tele o fa'atulagaga e pei ona i ai, pe mafai fo'i ona e suia le itulagi i se nofoaga autu fa'amatalaga e latalata atu ia te oe po'o le mea e te fa'atinoina ai au fa'ata'ita'iga.
Fa'afefea ona fa'alauiloa lau GoPhish Instance
A maeʻa le faʻagasologa o le saofaga ma le faʻatulagaina, ua oʻo i le taimi e faʻalauiloa ai lau faʻataʻitaʻiga GoPhish e ala i le mulimuli i laasaga nei:
- Kiliki i luga o le Launch from Website button i luga o le itulau manuia o le saofaga.
- Ia mautinoa o loʻo i ai sau VPC faʻaletonu o loʻo i ai DNS host names assignment ma se subnet e iai le IPv4 tofiga. Afai e te le faia, e tatau ona e fatuina.
- O le taimi lava e te maua ai se VPC le lelei, faʻasaʻo le VPC faʻatulagaina ma faʻatagaina igoa DNS talimalo.
- Fausia se subnet e fa'afeso'ota'i ma le VPC. Ia fa'amautinoa e te fa'atagaina le tu'ufa'atasia o tuatusi IPv4 fa'alaua'itele i totonu o fa'asologa o feso'ota'iga.
- Fausia se faitotoa initaneti mo lau VPC, faʻapipiʻi i le VPC, ma faʻaopoopo se auala i le initaneti faitotoa ile laulau auala.
- Fausia se kulupu saogalemu fou e fa'atatau i fa'atauga fa'atau ma fa'asaoina.
- Suia i se pa'aga autu e te fiafia e fa'aaoga pe fa'atupuina se ki fou.
- A mae'a loa la'asaga nei, e mafai ona e fa'alauiloa lau fa'ata'ita'iga.
Auala e Feso'ota'i ai i lau Fa'ata'ita'iga GoPhish
Ina ia faʻafesoʻotaʻi i lau faʻataʻitaʻiga GoPhish, mulimuli i laasaga nei:
- Ulufale i lau tala AWS ma alu i le EC2 dashboard.
- Kiliki i Fa'ata'ita'iga ma su'e lau fa'ata'ita'iga fou GoPhish.
- Kopi lau fa'ata'ita'iga ID, lea o lo'o i lalo ole koluma Fa'asinomaga ID.
- Siaki o lo'o sa'o lau fa'ata'ita'iga e ala i le alu i le Fa'ailoga Siaki o Tulaga ma fa'amaonia ua pasia le lua su'esu'ega tulaga.
- Tatala se laina ma faʻafesoʻotaʻi i le faʻataʻitaʻiga e ala i le faʻaogaina o le "ssh -i 'path/to/your/keypair.pem' ubuntu@instance-id" command.
- Ole taimi nei e mafai ona e fa'aogaina lau fa'amafanafanaga fa'apule e ala ile fa'aofiina ole tuatusi IP lautele a lau instance i lau su'esu'ega.
Faʻatulagaina lau lava SMTP server ma Amazon SES
Afai e leai sau lava server SMTP, e mafai ona e faʻaogaina le Amazon SES e fai ma lau server SMTP. O le SES o se 'au'aunaga e lafo atu i imeli e sili ona fa'aogaina ma taugofie e mafai ona fa'aoga e lafo ai imeli fefa'ataua'iga ma maketi. E mafai fo'i ona fa'aogaina le SES e fai ma server SMTP mo Go Phish.
Ina ia setiina le SES, e tatau ona e fatuina se SES account ma faʻamaonia lau tuatusi imeli poʻo lau vaega. O le taimi lava e te faia ai lena mea, e mafai ona e faʻaogaina tulaga SMTP na matou faʻamatalaina i luga e faʻapipiʻi ai lau Go Phish faʻataʻitaʻiga e faʻaoga ai le SES e fai ma lau server SMTP.
SMTP tulaga
O le taimi lava e te setiina ai lau faʻataʻitaʻiga ma maua le faʻamafanafanaga faʻapitoa, atonu e te manaʻo e faʻapipiʻi au seti SMTP. Ole mea lea ole a fa'atagaina oe e lafo imeli mai lau fa'ata'ita'iga Go Phish. Ina ia faia lenei mea, faʻafeiloaʻi i le "Sending Profiles" tab i le admin console.
I le vaega o faʻamatalaga tuʻuina atu, e mafai ona e ulufale i au faʻamatalaga SMTP server, e aofia ai le igoa talimalo poʻo le tuatusi IP o lau server SMTP, le numera o le taulaga, ma le auala faʻamaonia. Afai o loʻo e faʻaogaina le Amazon SES e fai ma au SMTP server, e mafai ona e faʻaogaina tulaga nei:
- Hostname: email-smtp.us-west-2.amazonaws.com (sui us-west-2 ma le itulagi na e setiina ai lau SES account)
- Taulaga: 587
- Auala fa'amaonia: Ulufale
- Igoa fa'aoga: lou igoa fa'aoga SES SMTP
- Upu faataga: lau upu faataga SES SMTP
Ina ia su'e au tulaga SMTP, e mafai ona e lafoina se imeli su'ega i se tuatusi fa'apitoa. Ole mea lea ole a fa'amautinoa ai e sa'o au fa'atulagaga ma e mafai ona e fa'asolo lelei imeli mai lau fa'ata'ita'iga.
Ave'esea tapula'a e lafo ai imeli
Ona o le faaletonu, EC2 taimi e iai tapula'a i imeli e alu ese e taofia ai le spam. Ae ui i lea, o nei tapula'a e mafai ona avea ma fa'afitauli pe afai o lo'o e fa'aogaina lau fa'ata'ita'iga mo le lafo sa'o ile imeli, pei ole Go Phish.
Ina ia aveese nei tapulaʻa, e tatau ona e faʻamaeʻaina ni nai laasaga. Muamua, e tatau ona e talosaga e aveese lau tala mai le lisi "Amazon EC2 sending limits". O lenei lisi e faʻatapulaʻa le numera o imeli e mafai ona lafo mai lau faʻataʻitaʻiga i le aso.
O le isi, e mana'omia le fa'atulagaina o lau fa'ata'ita'iga e fa'aoga ai se tuatusi imeli fa'amaonia po'o se vaega ile vaega "Mai" o au imeli. E mafai ona faia lenei mea i le vaega "Imeli Faʻataʻitaʻiga" o le faʻamafanafanaga admin. I le fa'aogaina o se tuatusi imeli fa'amaonia po'o se fa'alapotopotoga, e te fa'amautinoa o le a sili atu le tu'uina atu o au imeli i pusa meli a au tagata e mauaina.
iʻuga
I totonu o lenei tusiga, matou te ufiufi faʻavae o le faʻatulagaina o Go Phish i luga ole AWS Marketplace. Na matou talanoaina pe fa'afefea ona su'e ma lesitala i le Go Phish ofo, fa'afefea ona fa'alauiloa lau fa'ata'ita'iga, fa'afefea ona maua le EC2 dashboard e siaki ai lou soifua maloloina, ma fa'afefea ona fa'afeso'ota'i ile admin console.
Sa matou fa'atalanoaina fo'i fesili masani e uiga i le lafoina o imeli, e aofia ai pe fa'afefea ona fa'afouina au tulaga SMTP, aveese fa'atapula'aina o le lafoina o imeli, ma fa'atutu lau lava SMTP server ma Amazon SES.
Faatasi ai ma lenei faʻamatalaga, e tatau ona mafai ona e faʻatulaga lelei ma faʻapipiʻi Go Phish i luga o le AWS Marketplace, ma amata faʻataʻitaʻiina faʻataʻitaʻiga phishing e suʻe ma faʻaleleia le saogalemu o lau faʻalapotopotoga.
