PhishReportCS is a penetration testing and red teaming tool that automates the phishing campaign reporting process for Cobalt Strike phishing campaigns.

• Automated phishing campaign reporting
  • A phishing report that combines the Cobalt Strike TSV files
  • A phishing report that highlights all phishing clicks
  • A phishing report that is converted into a reporting format similar to PhishMe but with additional data
  • A phishing report that customized to highlight important details from the phishing campaign

• Cobalt Strike
• Custom Cobalt Strike Aggressor Script (PhishingProfiler.cna)

Clone the GitHub repository

git clone https://github.com/Central-InfoSec/Cobalt-Strike-Phishing-Campaign-Reporting /opt/Central-InfoSec/Cobalt-Strike-Phishing-Campaign-Reporting

• Load the Custom Cobalt Strike Aggressor Script (PhishingProfiler.cna)
• Execute a phishing campaign with Cobalt Strike
• Export the Cobalt Strike phishing data in TSV files
• Update the directory names in the PowerShell script (Lines 14, 17, & 20)
• Run the following PowerShell script:

CreatePhishingReportsFromCobaltStrikePhishingCampaign.ps1

Example of applications.tsv

Example of campaigns.tsv

Example of EmployeeDetails.csv

Example of events.tsv

Example of sentemails.tsv

Example of tokens.tsv

Example of webhits.tsv

Example of Phishing Campaign Report 1

Example of Phishing Campaign Report 2

Example of Phishing Campaign Report 3

Example of Phishing Campaign Report 4