Skip to main content
Sign in
Deutsch Español Français Italiano

PhishBrain – Lists

From this section you can manage your targets. A list is a group of users that can be used as a target in a phishing simulation campaign.

To add a new list you click on the New List button. You get to choose from one of the 4 different types of list:

  • Address List - It's a simple address list, you can manually populate it or import from CSV file
  • Office 365 - This type of list is linked to a Office 365 tenant and will pull users automatically
  • Google - This type of list is linked to a Google tenant and will pull users automatically
  • LDAP - This type of list is linked to an Ldap directory service and will pull users automatically.

The icons next to each entry permit actions like: view, edit, copy and delete on the selected list.

Address List

Very basic configuration, simply input one by one, all you targets. Alternatively you can import from a CSV file with following characteristics:

  • Without header
  • Without text qualifiers
  • Use comma (',') as field separator

Fields position:

  1. Name
  2. Surname
  3. Email
  4. Telephone
  5. Position

NOTE: if an entry is already present with same email address, others fields will be updated; otherwise will be inserted as new entry. Example:

Name_0,Surname_0,name.surname0@example.com,+393331234560,position_0
Name_1,Surname_1,name.surname1@example.com,+393331234561,position_1

Office 365

Microsoft Office 365 configuration requires you Office 365 admin portal, to make some configurations. Office 365 relies on Azure Active Directory as directory service. Each Office 365 tenant corresponds to an Azure AD tenant where its user information is being stored. This guide will cover the steps needed to grant LibraCyber PhishBrain to query your Office 365 tenant, the permission needed are:

  • to get users details: user.read.all (or User.ReadBasic.All if you don't need telephone numbers)
  • to filter users by group: Group.Read.All

No changes are made to the Office 365 tenant itself by LibraCyber PhishBrain itself. Follow the steps of this how to: Microsoft Entra ID LibraCyber App registration Once you completed your Office 365 tenant setup you can proceed with the configuration below:  

Name Give it a name
 Tenant This is the tenant name of your Office 365, if your admin account is admin@testcompany.onmicrosoft.com, your tenant will more likely just be testcompany.onmicrosoft.com
Description Enter a friendly description here
Client ID Enter the Application Client ID you created in Office 365
Client Secret Enter the Client Secret generate by Office 365
Filter Optional filter used when fetching users, check Microsoft Graph API syntax
Group Filter As an easier alternative if you are looking to filter out a group of users, simply enter here the Office 365 Group ID you want to filter.

Click Save

Google

LibraCyber PhishBrain needs some permissions on your Google Tenant in order to retrieve information such users, groups and email addresses from Google. Follow the steps of this how to: GSuite APIs & Services registration Once you completed your GSuite APIs & Services setup, you can proceed with the configuration below:  

Name Give it a name
Google Customer ID Enter the ID of your Google Organization
Administrator email Enter the email address of one of the Tenant Administrators
Client ID Enter the Client ID created in Google API & Services
Client Secret Enter the Client Secret generated by Google API & Services
Service Account ID Enter the ID of the Service Account you created to access your Google instance
Service Account Email Enter the email address of the Service Account you created to access your Google instance
Service Account Key Enter the Private Key from JSON File of the Service Account authentication token you created to access your Google Organization

You can import Service Account data from Google JSON file. Click Save

LDAP

LibraCyber PhishBrain allows you to get entries from a directory service via LDAP protocol. The information needed to connect are the usual ones, please refer to you system administrator to get the configuration details:

Name Give it a name
Host Enter your LDAP host IP address or hostname here
Port Enter the TCP Port (usually 389)
Encryption Select the encryption option required by your server
Search DN Enter the username to authenticate and make searches
Search Password Enter the password
Base DN Enter the Distinguish Name of your user's
Default Search Enter the search query, following LDAP Syntax
Name Field Enter the LDAP first name field
Surname Field Enter the LDAP last name field
Mail Field Enter the LDAP user's email field
Position Field Enter the LDAP user's role field
Telephone Field Enter the LDAP user's mobile phone number field

Note: By clicking the button "Load defaults" at the top right you can load pre-set information for common directory services. Click Save

Related articles