Hacker News new | ask | show | jobs
by sethammons 2794 days ago
Feedback: I have no clue what this is or what I'm looking at even after starting to dig into docs. I have not yet Googled "phishing toolkit," but I would expect a blurb on the readme about what this does or a link to get me started on what the concept of a phishing toolkit is. All the comments are glowing, so I'm really missing something here.

To me, phishing is email (or phone calls, links, websites, or other comms) that attempt to get someone to give something away that is a secret. I don't see the relationship between that and your tool yet.

[Edit / Update] Ok. After going 14 pages deep into the project, down through a user guide, it is clear what this project does. But 14 pages!? I recommend updating the readme to have, near the top, a section on selling/introducing the tool. "Gofish allows you to easily create a fake landing page that mimics your real landing page and send phishing email to get people in your organization to come to the phishing site. A UI shows stats collected on emails opened, links clicked, and data submitted to the phishing site. Set up multiple campaigns and much more. See our list of features." Add some relevant pics like the dashboard and your readme will really be helpful to folks like me.

2 comments

Thank you for the feedback! It’s really appreciated.

Just out of curiosity, does the copy on the main website [0] give a better indication or does that still not make for a clear description?

I ask because, while the repo was linked in this case, the main website is where most people land.

[0] https://getgophish.com

Ah, yes, that is much better :) Fanstastic tool. Looks really well done.
I think I can still do a better job of pointing people who hit the repo first back to the website for more information. Right now, it’s linked, but it could be more clear.

I’ll take that as an opportunity for improvement. Thanks so much for taking the time to type out that feedback!

Maybe instead not a passive link; doll it up a bit. "What is Gofish? Learn more here!" or similar. Thanks for the response!
its one of those things that if you don't know what it is from a glance you are definitely not the target audience so I would not fault them for it.
This has always felt like a core unwritten rule for github projects from my experience, and much to my frustration.