lateralus

README

What is Lateralus and why?

Lateralus is tool built to help with phishing campaigns. It has a lot of customizable report and template injection points for your emails. In the future it will also provide integration with Modlishka result file.

How does it work?

• Run lateralus generate -n config.yaml
• Edit config.yaml file to match your needs
• Pass the config.yaml to lateralus run as lateralus run -c config.yaml
• Wait

Installation

You can install it with: go get -u github.com/lateralusd/lateralus or build it from sources by cloning the directory and running the go build.

Setting up

Creating template

In yaml config: template:

The first step is to create the email template which you will be sending to your targets. Possible fields inside template are

• {{.Name}} - This will be substituted for target name from .csv file
• {{.URL}} - URL to include inside email
• {{.AttackerName}} - It says it all for itself

Example of template file can be found at templates/sample.com:

Greetings {{.Name}},

My resume is available at following url {{.URL}}

Best regards,
{{.AttackerName}}

Creating targets

In yaml config: targets:

Targets needs to be in .csv format in format Name,Email like so:

John,john.doe@example.com
Alan,alan.smith@example.com

Choosing URL mode

You have two options for URLs:

• Single - every user get's the same url link ( when the generate: False inside the config file)
• Generate - every user get's different url, with the part <CHANGE> inside link: being present (when the generate: True inside the config file)

You also have an option to provide the length of the generated part, by default it will be 10 characters long. (Configurable via length: in config file).

Example

After we have configured our .yaml config file let's run it now.

$ cat config.yaml
url:
  generate: True
  link: "https://www.google.com/?ident=<CHANGE>"
  length: 10

mail:
  name: Attacker
  from: Not Attacker
  subject: Not phishing mail
  custom: ""

attack:
  targets: targets.csv
  template: ./templates/sample.com

mailServer:
  host: smtp.gmail.com
  port: 587
  username: "someusername@gmail.com"
  password: "somePassword"
  encryption: tls

general:
  bulk: True
  bulkDelay: 10
  bulkSize: 3
  delay: 5
  separator: ","

Example run

Template:

Greetings {{.Name}},

My resume is available at following url {{.URL}}

Best regards,
{{.AttackerName}}

Targets file:

test,test@gmail.com
test1,test@gmail.com
test2,test@gmail.com

Running

$ lateralus run -c config.yaml
[INFO] Starting campaign at 2021-05-07 11:40:16
[INFO] Template not provided, using default template
[INFO] Output not provided, will use default output (Subject_startTime)
[INFO] Parsing config from "config.yaml"
[INFO] Output filename will be "Notphishingmail_2021-05-0711:40:16"
[INFO] Parsing targets from "targets.csv"
[INFO] Starting to send the mails. Hope for the best
Sending mails: 2 / 3 [===============================================================================>_______________________________________] 1 mail/s 66.67%

If we check inbox of user test@gmail.com, we can see that email has been sent.

Config options

Why lateralus as a name

I really love that album.