travisbale/barb repository overview

⁠Barb

Phishing campaign management platform. Single Go binary with an embedded web UI, backed by SQLite. Integrates with https://hub.docker.com/r/travisbale/miraged⁠ for reverse proxy session capture and credential harvesting.

⁠Quick Start

docker run -d \
    --name barb \
    -p 443:443 \
    -v barb-data:/data \
    travisbale/barb

Open https://localhost⁠ and log in with the default credentials printed in the container logs:

docker logs barb

⁠Configuration

Barb is configured via CLI flags passed as container arguments:

• --addr :443 -- Listen address
• --db /data/barb.db -- SQLite database path
• --debug -- Enable debug logging

Example with custom port:

docker run -d \
    -p 8443:8443 \
    -v barb-data:/data \
    travisbale/barb \
    serve --addr :8443

⁠Volumes

• /data -- SQLite database and application data

⁠Running with miraged

Barb works standalone for manual-lure campaigns, or paired with https://hub.docker.com/r/travisbale/miraged⁠ for automated reverse proxy phishing with session capture:

# Start miraged
docker run -d \
    --name miraged \
    --cap-add NET_BIND_SERVICE \
    -p 443:443 -p 53:53/udp \
    -v mirage-config:/etc/mirage \
    -v mirage-data:/var/lib/mirage \
    travisbale/miraged

# Start barb on a different port
docker run -d \
    --name barb \
    -p 8443:8443 \
    -v barb-data:/data \
    travisbale/barb \
    serve --addr :8443

Enroll the miraged server through Barb's web UI using the invite token from docker logs miraged.

⁠Image Variants

Multi-architecture images are published for linux/amd64 and linux/arm64.

⁠Tags

• latest -- most recent release
• X.Y.Z -- specific version
• X.Y -- latest patch for a minor version
• X -- latest minor for a major version

⁠Source

https://github.com/travisbale/barb⁠