rootsec_Research / Experiments / Write-ups
The notebook_
Long-form write-ups from the offensive side — phishing infrastructure, web security, and the things you find when you keep digging.
3 posts
PhishCraft: From Local to Live Infrastructure
Setting up external infrastructure using VPSs, custom domains, and DNS, focusing on proper configuration and how to deploy GoPhish successfully for phishing engagements against clients.
PhishCraft: Burning Less, Blending More
Focusing on GoPhish customisation and OPSEC by removing default settings, changing identifiers, refining behaviour, and adjusting how campaigns operate so they blend in better and don't get burned.
PhishCraft: Building a Local GoPhish Lab
Setting up a local on-prem phishing lab in VMware using GoPhish, configuring a simple mail setup, and testing how campaigns and templates work before moving into more advanced infrastructure.