热门标签 | HotTags
当前位置:  开发笔记 > 编程语言 > 正文

DuplicateEmailsBeingSent

WhatversionofGophishareyouusing?:Version0.5.0Briefde

What version of Gophish are you using?:
Version 0.5.0

Brief description of the issue:
A large number of the campaign recipients are receiving the phishing email twice.

What are you expecting to see happen? :
The email should only be sent once per email address.

What are you seeing happen?
I've run 7 campaigns of varying size. Out of the 7 campaigns 2 of them have occurrences where emails were sent multiple times to the same email address. I've verified within the 'mail.log', the GoPhish web interface and with our email team that this is occuring. What's odd is that with the exception of the emailing list (addresses and size), there have been no changes between any of the campaigns or the mail server. The times that this issue occurred were campaign 4 and 7, with there being no issues inbetween or prior. From what I can tell, there is a unique identifier for each email sent in the 'mail.log' file. This would imply to me at least, that postfix is being told to send the email 2 seperate unique times.

Please provide any terminal output that may be relevant below:
emailsent2
I've included a screenshot from GoPhish showing that the email status, "Email Sent", shows up twice. I've also included output from the mail.log file. I've sanitized certain data, but this shows the same recipient receiving the email twice over the course of 4 seconds.

1
2
3
4
5
6
7
8
9
10
11
12
May 18 13:09:41 ServerNameReplaced postfix/smtpd[6660]: 896DA3FBFC: client=localhost[127.0.0.1]

May 18 13:09:41 ServerNameReplaced postfix/cleanup[6748]: 896DA3FBFC: message-id&#061;<20180518130941.896DA3FBFC>

May 18 13:09:41 ServerNameReplaced postfix/qmgr[19971]: 896DA3FBFC: from&#061;, size&#061;1148, nrcpt&#061;1 (queue active)

MAY 18 13:09:41 ServerNameReplaced POSTFIX/SMTP[6751]: 896DA3FBFC: to&#061;, relay&#061;DestinationServerRemoved[x.x.x.x]:25, delay&#061;0.16, delays&#061;0/0/0.04/0.12, dsn&#061;2.0.0, status&#061;sent (250 2.0.0 2hyj7phj4d-1 message accepted for delivery)

MAY 18 13:09:41 ServerNameReplaced POSTFIX/QMGR[19971]: 896DA3FBFC: REMOVED



May 18 13:09:45 ServerNameReplaced postfix/smtpd[6668]: 428583FBFB: client&#061;localhost[127.0.0.1]

May 18 13:09:45 ServerNameReplaced postfix/cleanup[6748]: 428583FBFB: message-id&#061;<20180518130945.428583FBFB>

May 18 13:09:45 ServerNameReplaced postfix/qmgr[19971]: 428583FBFB: from&#061;, size&#061;1148, nrcpt&#061;1 (queue active)

May 18 13:09:45 ServerNameReplaced postfix/smtp[6749]: 428583FBFB: to&#061;, relay&#061;DestinationServerRemoved[x.x.x.x]:25, delay&#061;0.18, delays&#061;0/0/0.04/0.13, dsn&#061;2.0.0, status&#061;sent (250 2.0.0 2hwu6g7rnw-1 Message accepted for delivery)

May 18 13:09:45 ServerNameReplaced postfix/qmgr[19971]: 428583FBFB: removed


Please provide as many steps as you can to reproduce the problem:
I'm not sure how to reproduce this problem. As I stated above it's only occured with 2 of the 7 campaigns I've run. The 7th campaign was fairly large (5,000 recipients), however the 4th campaign was only 1,000, which was smaller than the 3,000 recipients for campaign 5 and 6. I don't believe size is playing a part in this.

该提问来源于开源项目:gophish/gophish

Hi,

We are sending to 3324 users, we found that the email is being sent out twice to some users. I'm also seeing captures going down. People who have clicked the link and we're losing the results.

This is not great as we're running a live test at the moment.

We're using the latest version of gophish (v0.8.0).

I downloaded the raw list of events and I can see that we have duplicates in there. Not only are the clients receiving the email twice but the campaign stats figures have been going down.

We checked our input data and it seems that there were some records supplied by the client that had NULL values in them (As an unquoted string in an excel cell).

Looking in the gophish user group those 32 records seem to be missing (they weren't imported as expected) however when running the live phish the emails are duplicated and the clickthrough submitted figures are skewed.


推荐阅读
  • http:my.oschina.netleejun2005blog136820刚看到群里又有同学在说HTTP协议下的Get请求参数长度是有大小限制的,最大不能超过XX ... [详细]
  • 本文介绍了一个适用于PHP应用快速接入TRX和TRC20数字资产的开发包,该开发包支持使用自有Tron区块链节点的应用场景,也支持基于Tron官方公共API服务的轻量级部署场景。提供的功能包括生成地址、验证地址、查询余额、交易转账、查询最新区块和查询交易信息等。详细信息可参考tron-php的Github地址:https://github.com/Fenguoz/tron-php。 ... [详细]
  • Gitlab接入公司内部单点登录的安装和配置教程
    本文介绍了如何将公司内部的Gitlab系统接入单点登录服务,并提供了安装和配置的详细教程。通过使用oauth2协议,将原有的各子系统的独立登录统一迁移至单点登录。文章包括Gitlab的安装环境、版本号、编辑配置文件的步骤,并解决了在迁移过程中可能遇到的问题。 ... [详细]
  • Jboss的EJB部署描述符standardjaws.xml配置步骤详解
    本文详细介绍了Jboss的EJB部署描述符standardjaws.xml的配置步骤,包括映射CMP实体EJB、数据源连接池的获取以及数据库配置等内容。 ... [详细]
  • 向QTextEdit拖放文件的方法及实现步骤
    本文介绍了在使用QTextEdit时如何实现拖放文件的功能,包括相关的方法和实现步骤。通过重写dragEnterEvent和dropEvent函数,并结合QMimeData和QUrl等类,可以轻松实现向QTextEdit拖放文件的功能。详细的代码实现和说明可以参考本文提供的示例代码。 ... [详细]
  • Linux重启网络命令实例及关机和重启示例教程
    本文介绍了Linux系统中重启网络命令的实例,以及使用不同方式关机和重启系统的示例教程。包括使用图形界面和控制台访问系统的方法,以及使用shutdown命令进行系统关机和重启的句法和用法。 ... [详细]
  • 知识图谱——机器大脑中的知识库
    本文介绍了知识图谱在机器大脑中的应用,以及搜索引擎在知识图谱方面的发展。以谷歌知识图谱为例,说明了知识图谱的智能化特点。通过搜索引擎用户可以获取更加智能化的答案,如搜索关键词"Marie Curie",会得到居里夫人的详细信息以及与之相关的历史人物。知识图谱的出现引起了搜索引擎行业的变革,不仅美国的微软必应,中国的百度、搜狗等搜索引擎公司也纷纷推出了自己的知识图谱。 ... [详细]
  • 自动轮播,反转播放的ViewPagerAdapter的使用方法和效果展示
    本文介绍了如何使用自动轮播、反转播放的ViewPagerAdapter,并展示了其效果。该ViewPagerAdapter支持无限循环、触摸暂停、切换缩放等功能。同时提供了使用GIF.gif的示例和github地址。通过LoopFragmentPagerAdapter类的getActualCount、getActualItem和getActualPagerTitle方法可以实现自定义的循环效果和标题展示。 ... [详细]
  • IjustinheritedsomewebpageswhichusesMooTools.IneverusedMooTools.NowIneedtoaddsomef ... [详细]
  • 解决nginx启动报错epoll_wait() reported that client prematurely closed connection的方法
    本文介绍了解决nginx启动报错epoll_wait() reported that client prematurely closed connection的方法,包括检查location配置是否正确、pass_proxy是否需要加“/”等。同时,还介绍了修改nginx的error.log日志级别为debug,以便查看详细日志信息。 ... [详细]
  • 图像因存在错误而无法显示 ... [详细]
  • 本文介绍了Windows Vista操作系统中的用户账户保护功能,该功能是为了增强系统的安全性而设计的。通过对Vista测试版的体验,可以看到系统在安全性方面的进步。该功能的引入,为用户的账户安全提供了更好的保障。 ... [详细]
  • ShiftLeft:将静态防护与运行时防护结合的持续性安全防护解决方案
    ShiftLeft公司是一家致力于将应用的静态防护和运行时防护与应用开发自动化工作流相结合以提升软件开发生命周期中的安全性的公司。传统的安全防护方式存在误报率高、人工成本高、耗时长等问题,而ShiftLeft提供的持续性安全防护解决方案能够解决这些问题。通过将下一代静态代码分析与应用开发自动化工作流中涉及的安全工具相结合,ShiftLeft帮助企业实现DevSecOps的安全部分,提供高效、准确的安全能力。 ... [详细]
  • 本文介绍了使用C++Builder实现获取USB优盘序列号的方法,包括相关的代码和说明。通过该方法,可以获取指定盘符的USB优盘序列号,并将其存放在缓冲中。该方法可以在Windows系统中有效地获取USB优盘序列号,并且适用于C++Builder开发环境。 ... [详细]
  • Summarize function is doing alignment without timezone ?
    Hi.Imtryingtogetsummarizefrom00:00otfirstdayofthismonthametric, ... [详细]
author-avatar
kanlikanliti_627
这个家伙很懒,什么也没留下!
PHP1.CN | 中国最专业的PHP中文社区 | DevBox开发工具箱 | json解析格式化 |PHP资讯 | PHP教程 | 数据库技术 | 服务器技术 | 前端开发技术 | PHP框架 | 开发工具 | 在线工具
Copyright © 1998 - 2020 PHP1.CN. All Rights Reserved | 京公网安备 11010802041100号 | 京ICP备19059560号-4 | PHP1.CN 第一PHP社区 版权所有