News for hackers. Stuff that matters.
Re:Gophish: An open source phishing toolkit by sethammons on Friday October 26, 2018 @07:55AM (#18308407)
Feedback: I have no clue what this is or what I'm looking at even after starting to dig into docs. I have not yet Googled "phishing toolkit," but I would expect a blurb on the readme about what this does or a link to get me started on what the concept of a phishing toolkit is. All the comments are glowing, so I'm really missing something here.

To me, phishing is email (or phone calls, links, websites, or other comms) that attempt to get someone to give something away that is a secret. I don't see the relationship between that and your tool yet.

[Edit / Update] Ok. After going 14 pages deep into the project, down through a user guide, it is clear what this project does. But 14 pages!? I recommend updating the readme to have, near the top, a section on selling/introducing the tool. "Gofish allows you to easily create a fake landing page that mimics your real landing page and send phishing email to get people in your organization to come to the phishing site. A UI shows stats collected on emails opened, links clicked, and data submitted to the phishing site. Set up multiple campaigns and much more. See our list of features." Add some relevant pics like the dashboard and your readme will really be helpful to folks like me.

Re:Gophish: An open source phishing toolkit by jwcrux on Friday October 26, 2018 @08:02AM (#18308444)
Thank you for the feedback! It’s really appreciated.

Just out of curiosity, does the copy on the main website [0] give a better indication or does that still not make for a clear description?

I ask because, while the repo was linked in this case, the main website is where most people land.

[0] https://getgophish.com

Re:Gophish: An open source phishing toolkit by sethammons on Friday October 26, 2018 @08:17AM (#18308523)
Ah, yes, that is much better :) Fanstastic tool. Looks really well done.
Re:Gophish: An open source phishing toolkit by jwcrux on Friday October 26, 2018 @08:23AM (#18308558)
I think I can still do a better job of pointing people who hit the repo first back to the website for more information. Right now, it’s linked, but it could be more clear.

I’ll take that as an opportunity for improvement. Thanks so much for taking the time to type out that feedback!

Re:Gophish: An open source phishing toolkit by sethammons on Friday October 26, 2018 @08:36AM (#18308617)
Maybe instead not a passive link; doll it up a bit. "What is Gofish? Learn more here!" or similar. Thanks for the response!
Re:Gophish: An open source phishing toolkit by ru999gol on Friday October 26, 2018 @08:38AM (#18308627)
its one of those things that if you don't know what it is from a glance you are definitely not the target audience so I would not fault them for it.
Re:Gophish: An open source phishing toolkit by ideophobia on Friday October 26, 2018 @01:44PM (#18311367)
This has always felt like a core unwritten rule for github projects from my experience, and much to my frustration.