Well, we've come to the end of this course on Initial Access with Gophish.
As we wrap up the course,
this section will show you where to get more information on related topics.
If you want more information on Gophish's usage and configuration,
a good place to start is the Gophish user guide at this link. Gophish's
documentation also includes guides to automation and using their API here.
In Gophish's own words, it was built to be API first with a nice visual
dashboard as a wrapper around that, so their API should be easy to leverage.
More information about initial access can be found at the
TA0001 tactic on the MITRE ATT&CK website.
You can also find more detailed guides on the MITRE website covering
the spear phishing techniques used in this course.
You can also explore more information on different aspects of
phishing and spear phishing by reading up on different
techniques to identify phishing emails.
This reading can include much more sophisticated
attacks than we used in this course.
Other topics I would recommend are phishing mitigation, as well as the
most important step in preventing phishing attacks,
user education and training.
I hope you enjoyed this course on Initial Access with Gophish,
and I encourage you to continue experimenting with its features and
testing different capabilities within a lab environment.