0dteam / phishing-reporter Goto Github PK

Describe the bug
The "Report Phishing" button is displayed twice in the Outlook 365 client tab as well as in the context menu of a mail item.

To Reproduce

1. Install Phishing-Reporter according to the given instructions.
2. Run Outlook client.

Expected behavior
The "Report Phishing" button shall only be displayed once in the Outlook client.

Screenshots

Desktop:

• OS: Windows 10 22H2 (Build 19045.3930)
• Outlook version: Outlook for Microsoft 365 Version 2401

Additional context
This bug affects every element defined in the Ribbon.xml file.

Describe the bug
If you receive a real phishing-email, you can report it via the button and it works fine with both versions (32- and 64-bit), but if you want to send a simulated phishing-mail it works the same, but in the gophish dashboard there is no counting at "email reported". With the 64-bit version all is working fine.
The image shows the results of 2 simulated phishing emails that were sent, one with the 32-bit version and one with the 64-bit version. The counter was increased by one for the message with the 64-bit version.

Expected behavior
If somebody report a simulated phishing mail, the counter in the gophish dashboard should be incremented.

Screenshots

Desktop (please complete the following information):

• OS: Windows, 32-bit

Hi,
you wrote an important and great tool. It works on stations with Office 2019 (as you wrote), but unfortunately not on stations with Office 2016. Can you give me an advice to resolve this problem? Many thanks in advance.

Hi,

The following error was reported when followed the instruction and build the project.

"Unable to find manifest signing certificate in the certificate store."

I tried to unclick the "Sign the ClickOnce manifests", but it clicked again automatically and shown the same error.
https://i.stack.imgur.com/FIHjg.png

May I have your help?

thanks,

Hi, this isn´t an issue. How can I send the information in bode as txt attachment with the eml (2 attachment in total)
I see this code, I need to put this on a second txt attachment.

                        // Prepare the email body
                        reportEmail.Body = GetCurrentUserInfos();
                        reportEmail.Body += "\n";
                        reportEmail.Body += GetBasicInfo(mailItem);
                        reportEmail.Body += "\n";
                        reportEmail.Body += GetURLsAndAttachmentsInfo(mailItem);
                        reportEmail.Body += "\n";
                        reportEmail.Body += "---------- Headers ----------";
                        reportEmail.Body += "\n" + reportedItemHeaders;
                        reportEmail.Body += "\n";
                        reportEmail.Body += GetPluginDetails() + "\n\n";

                        reportEmail.Save();
                        //reportEmail.Display(); // Helps in debugginng
                        reportEmail.Send(); // Automatically send the email

Sometimes, Outlook disable the plugin due slow start.

can we export PAB manifest for Microsoft products for this reporter ?

Thank you for a brilliantly implemented add-in to report phishing mails, and integration with GoPhish. Excellent! It works great in our current Outlook setup with Office365.

Is your feature request related to a problem? Please describe.
However; Outlook now allows users to switch to the 'new Outlook', which is basically fully webview driven, and the add-in doesn't seem to work for that. Do you have any plans to migrate this add-in to the new Outlook?

Describe the solution you'd like
I'd love the add-in to work in both the standard Outlook and the 'new Outlook' .

Describe alternatives you've considered
I've been trying to develop a Outlook Web Add-in myself, fitting to the new Outlook, but got stuck around authentication when trying to use the Graph API. Identifying whether it was a GoPhish mail went fine, calling the GoPhish api as well, but moving the message to deleted items and forwarding it to the security team failed.

Hi,

I tried to make a exe as installation for this plugin, but without luck, always got vsto file which is not friendly for mass deployment ...
How i can build .exe from it?
or is there option to make silent install of this vsto, so i can easily make mass distribution ?

thank you

Hello,

This isn't a issue.

First of all, thanks a lot to share the project.

Where I can change the confirm message that appears when I push the report button?