+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.ly/Forum-Hacking-Tools)
+--- Thread: Mercure - tool for security managers who want to teach phishing (/Thread-Mercure-tool-for-security-managers-who-want-to-teach-phishing)
Mercure - tool for security managers who want to teach phishing - ZanGetsu - 09-04-2017
Mercure is a tool for security managers who want to teach their colleagues about phishing.
What Mercure can do:
- Create email templates
- Create target lists
- Create landing pages
- Handle attachments
- Let you keep track in the Campaign dashboard
- Track email reads, landing page visits and attachment execution.
- Harvest credentials
What Mercure will do:
- Display more graphs (we like graphs!)
- Provide a REST API
- Allow for multi-message campaigns (aka scenarios)
- Check browser plugins
- User training
First, add your targets
![[Image: mercure_targets.png]](https://github.com/synhack/mercure/raw/master/docs/img/mercure_targets.png)
You need to fill mercure name, the target email.Target first and last name are optional, but can be usefull to the landing page
![[Image: mercure_targets.png]](https://github.com/synhack/mercure/blob/master/docs/img/mercure_targets.png)
You need to fill mercure name, the target email.Target first and last name are optional, but can be usefull to the landing pageThen, fill the email template.![[Image: mercure_emailtemplate.png]](https://github.com/synhack/mercure/raw/master/docs/img/mercure_emailtemplate.png)
You need to fill the mercure name, the subject, the send and the email content. To improve the email quality, you have to fill the email content HTML and the text content. To get information about opened email, check "Add open email tracker" You can be helped with "Variables" category.Attachments and landing page are optionnal, we will see it after.
![[Image: mercure_emailtemplate.png]](https://github.com/synhack/mercure/blob/master/docs/img/mercure_emailtemplate.png)
You need to fill the mercure name, the subject, the send and the email content. To improve the email quality, you have to fill the email content HTML and the text content. To get information about opened email, check "Add open email tracker" You can be helped with "Variables" category.Attachments and landing page are optionnal, we will see it after.Finally, launch the campaign![[Image: mercure_campaign.png]](https://github.com/synhack/mercure/raw/master/docs/img/mercure_campaign.png)
You need to fill the mercure name, select the email template and the target group. You can select the SMTP credentials, SSL using or URL minimazing
![[Image: mercure_campaign.png]](https://github.com/synhack/mercure/blob/master/docs/img/mercure_campaign.png)
You need to fill the mercure name, select the email template and the target group. You can select the SMTP credentials, SSL using or URL minimazingOptional, add landing page![[Image: mercure_landingpage.png]](https://github.com/synhack/mercure/raw/master/docs/img/mercure_landingpage.png)
You need to fill the mercure name, the domain to use You can use "Import from URL" to copy an existing website.You have to fill the page content with text and HTML content by clicking to "Source"
![[Image: mercure_landingpage.png]](https://github.com/synhack/mercure/blob/master/docs/img/mercure_landingpage.png)
You need to fill the mercure name, the domain to use You can use "Import from URL" to copy an existing website.You have to fill the page content with text and HTML content by clicking to "Source"Optional, add Attachment
![[Image: mercure_attachment.png]](https://github.com/synhack/mercure/raw/master/docs/img/mercure_attachment.png)
RE: Mercure - tool for security managers who want to teach phishing - mothered - 09-04-2017
In comparison to the tools I'm accustomed to setting up and using, this looks very user-friendly. Nice set of features too.
Thanks.
RE: Mercure - tool for security managers who want to teach phishing - Blink - 09-05-2017
Seems like it has a very nice UI. Also, Python programs are generally easy to extend, so that's another advantage of this.
RE: Mercure - tool for security managers who want to teach phishing - SxTxN - 09-07-2017
I'm sure this'll be useful sometime soon, thanks.