Download

Change log and version release history

Version 0.7, code name Ghost Fish. Released August 13, 2012

• Vast improvements in the editing functionality for templates and education packages. Major changes include: two different editors to choose from (the oroginal spt text editor and TinyMCE), copy templates or education to new version and then customize them.
• Added education completion tracking, now you can determine if your targets completed the assigned education in a campaign.
• Support for the Google and TinyURL URL shortener services. Now your phishing emails can have shortened URLs, making them harder to detect.
• Support for sending SMTP using SSL secured connections.
• Enhancements to the viewing of campiang information including SMTP relay used and destination URL used.
• Initial support for using spt in SSL/TLS secured installations, code updates to prevent insecure content warnings.
• All forms now generate inline errors with entered value retention, allowing easy correction of incorrect or missing items without requiring all information to be entered again.
• Email tracking times are now more accurate when viewing campaign information.
• Most items in the Quick Start module now feature links allowing you to quickly access the desired location in the spt UI.
• Enhancements to the browser detection script for more information on what you need vs. what you have.
• Many security and usability issues fixed.
• Additional improvements in authentication and session management security.

Lines of code for version 0.70:

Version 0.6, code name Flying Fish. Released March 23, 2012.

• Email sending process when starting campaign completely rewritten.
• Sendmail no longer used for sending emails, all email functions are handled by the SwiftMailer library.
• Campaign statistics displayed in easy to use charts with filters powered by the High Charts library.
• Thirteen built-in templates, twelve allowing for quick start campaigns. A quick start template just requires targets to exist and simulates an email where all you need is a link click (e.g. drive-by malware downloaders).
• Eight built-in education modules, including four that do not require Internet access. More education options for your campaigns.
• Quick Start content helps you get educating as quickly as possible.
• UI look has been completely updated with color icons throughout for a modern, standardized, look and feel.
• Improvements made to the module upload and design process for better install and removal results.
• Logic to prevent duplicate target email addresses in a single target group.
• New Admins – Test target group created that allows immediate testing of campaigns against the spt administrators (new v 0.60 installations only).
• Dashboard module block layout reorganized to improve usability and get the information you need to you as quickly as possible.
• Twitter feed for spt in the dashboard.
• Entire spt codebase (not including SwiftMailer and High Charts libraries) has been “beautified” to be consistent and use the One True Brace Style (1TBS) as much as possible.
• Many bug fixes and tweaks to improve usability.

Lines of code for version 0.60:

Version 0.5, code name Electric Catfish. Released February 17, 2012.

• Improved installation routine, with environmental checks for the most common installation problems.
• Improved campaign metrics and reporting, including export to CSV functionality.
• The editor module is now a core spt module and is installed with the spt.
• Improved target management including flexible support for an unlimited amount of custom target attributes.
• Target template download replaced with target export (and then import via Add many function).
• Improved template scraping process including options to personalize emails with target first and last name, and basic HTML support in the email message body.
• The entire spt source code has been cleaned and consolidated to eliminate tons of errors of duplicated code.
• Helpful links in the sidebar now get you straight to the sptoolkit.com site for documentation and support.
• Usability improvements in navigation within the dashboard.

Lines of code for version 0.5:

Version 0.42, code name Dogfish. Released January 21, 2012.

• Many bug fixes and improvements in the Campaign, Education, Targets and Templates modules.
• Fixes issue with default education video not being available.
• See commit log for full code changes.
• New installs should download the full package.
• The upgrade package will upgrade 0.40 or 0.41 to 0.42. See readme.txt in the upgrade package.

Lines of code for version 0.42:

Version 0.41, code name Dartfish. Released January 17, 2012.

• Sanity checking in site scraper. We missed some sanity checking in the site scraper function where the email.php was created. Thanks to Steve M. for bringing this issue to our attention.

Lines of code for version 0.41:

Version 0.4, code name Dragonfish. Released January 8, 2012.

• Response analytics. Data about the browser and computer used by the target, check it out in the campaign responses details.
• Geo-location information about targets based on the IP address captured when the campaign link was clicked.
• Education module. Educate targets immediately after they click the link (e.g., drive-by malware download) or after they submit the form (e.g., old-school username and password phishing).

Lines of code for version 0.4:

Version 0.3, code name Catfish. Released December 2, 2011.

• The editor. Now that you are scraping sites you can edit template components directly within spt. The editor is also the first add-on module made available for the spt.
• Custom target attributes. Reporting is on the horizon but first the groundwork must be laid. Add custom attributes to your targets for reporting and target analytics.

Lines of code for version 0.3:

Version 0.2 was skipped.

Version 0.1, code name Barracuda. Released November 13, 2011.

• Template scraping technology. Allows you to scrape external sites and turn them directly into a template.
• Help has arrived. A tooltip system that allows for quick, targeted help information at every turn. Just look for the lightbulb!

Lines of code for version 0.1:

Version 0.0, code name Albacore. Released October 24, 2011.

• Initial version of spt released to the public. Features support for basic phishing and results analysis with one template available for usage.
• Basic Framework and concept. Meant as a platform for growth.

Lines of code for version 0.0: