<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Performing Phishing Simulation

## GoPhish REST API

**Base:** `https://SERVER:3333/api/`  **Auth:** `Authorization: Bearer KEY`

```bash
# Campaigns
curl -k -H "Authorization: Bearer KEY" https://SERVER:3333/api/campaigns/
curl -k -H "Authorization: Bearer KEY" https://SERVER:3333/api/campaigns/1/results

# Resources
curl -k -H "Authorization: Bearer KEY" https://SERVER:3333/api/templates/
curl -k -H "Authorization: Bearer KEY" https://SERVER:3333/api/pages/
curl -k -H "Authorization: Bearer KEY" https://SERVER:3333/api/smtp/
curl -k -H "Authorization: Bearer KEY" https://SERVER:3333/api/groups/
```

## Evilginx2
```bash
phishlets hostname o365 login.example.com
phishlets enable o365
lures create o365
lures get-url 0
```
