<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: conducting-phishing-awareness-campaigns
description: >-
  Plan and execute phishing awareness campaigns using GoPhish and commercial
  platforms. Covers pretext design, landing page creation, campaign scheduling,
  result analysis, and remediation workflows for repeat offenders.
domain: cybersecurity
subdomain: security-awareness
tags:
  - phishing-simulation
  - gophish
  - campaign-management
  - social-engineering
  - metrics
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: ["T1566"]
---

# Conducting Phishing Awareness Campaigns

## Overview

Phishing awareness campaigns test organizational resilience by simulating real-world
phishing attacks. This skill covers campaign lifecycle from pretext design through
result analysis, using GoPhish and commercial platforms. Effective campaigns use varied
pretexts, progressive difficulty, and positive reinforcement over punishment.

## Prerequisites

| Requirement | Install |
|---|---|
| GoPhish | `docker run -d --name gophish -p 3333:3333 gophish/gophish` |
| SMTP relay | Configured sending infrastructure |
| Landing pages | Credential capture templates |

## Commands

| Command | Description |
|---|---|
| `node agent.js create-campaign --pretext password-reset --targets staff.csv` | Create a new phishing campaign |
| `node agent.js analyze-results --campaign-id 42` | Analyze campaign results and generate report |
| `node agent.js generate-pretext --difficulty medium --theme it-support` | Generate phishing pretext template |
| `node agent.js remediate --repeat-clickers report.json` | Generate remediation plan for repeat offenders |

## Workflow

### Step 1 — Assess Current State

Evaluate existing capabilities and identify gaps before implementing changes.

```bash
# Run assessment with agent tooling
node agent.js create-campaign --pretext password-reset --targets staff.csv
```

### Step 2 — Plan and Design

Define objectives, scope, timeline, and success criteria.

```bash
# Plan implementation
node agent.js analyze-results --campaign-id 42
```

### Step 3 — Execute and Deliver

Implement the planned activities and deliver outputs.

```bash
# Execute delivery
node agent.js generate-pretext --difficulty medium --theme it-support
```

### Step 4 — Measure and Optimize

Track results against success criteria and iterate.

```bash
# Measure results
node agent.js remediate --repeat-clickers report.json
```

## Verification

- [ ] Prerequisites validated and tools installed
- [ ] Assessment of current state completed
- [ ] Implementation plan documented and approved
- [ ] Execution completed per plan
- [ ] Results measured against defined KPIs
- [ ] Findings documented and next steps identified
