Skip to content

Frequently Asked Questions

Spencer McIntyre edited this page Apr 13, 2016 · 23 revisions

I'm getting a 404 / error page on the server

If a 404 / "Page Not Found" is being shown when a landing page is being viewed or tested this is most likely due to the server's require_id setting. The require_id setting is enabled by default and prevents users from requesting landing pages without a valid id associated with a non-expired campaign.

This issue can be verified by checking the server log for the message "WARNING denying request due to lack of a valid id". Users have three options for testing landing pages when the require_id setting is enabled.

  1. Recommended: Users can send themselves a test email utilizing the jinja HTML reference of <a href="{{ url.webserver }}">click me</a>to provide yourself and targets an ID to access the page.
  • Afterwards the visit can be deleted from the campaign from the client
  1. Users can check that the page is being served using the "Verify URL" button in the client
  2. Users can disable the require_id setting on the server and restart it

What are the default credentials

There are no default credentials for King Phisher. The credentials that the client UI prompts for are the credentials to an account on the King Phisher server. This account must have the necessary privileges to use SSH and forward TCP ports. For more information see, the page on Server Authentication.

How do I generate verbose logging output

Both the client and the server will log output to the console when started from the command line with the "-L DEBUG" flag. When starting the server, it is also recommended to specify the "-f" flag to keep the process in the foreground.

How do I send messages through GMail

In order to send messages from GMail, it is necessary to use the GMail SMTP servers. While sending messages through GMail's SMTP servers, it's common to receive a Failed to send message error. This can be due to malicious content being detected in the message. Additionally the Source Email settings must correspond to the SMTP Username in order for the message to be accepted.

The following settings need to be configured to as shown.

Setting Name Setting Value
SMTP Server smtp.gmail.com:465
SMTP Username USERNAME@gmail.com
Connect With SSL On
Tunnel Over SSH Off