evilgophish
PhishDock
evilgophish | PhishDock | |
---|---|---|
20 | 1 | |
1,309 | 9 | |
- | - | |
10.0 | 10.0 | |
7 months ago | over 1 year ago | |
Go | HTML | |
GNU General Public License v3.0 only | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
evilgophish
- Evilgophish Evilginx 3.0.0 Update
-
Phishing Infrastructure Resources?
https://github.com/fin3ss3g0d/evilgophish comes shipped with SMS phishing capabilities, and is a combination of gophish and evilginx2 with Apache2 proxy in front
-
You should probably disable WebUSB and WebBluetooth in Chrome
As part of this process, I started looking at the various avenues of attack that could bypass FIDO/FIDO2/U2F MFA style authentication. Previously I would use something like EvilGoPhish to phish employees/customers and steal their session cookies to bypass MFA but this does not work with U2F.
-
Phish a User with MFA Enabled
All evilginx2 fans checkout this project that provides campaign statistics for evilginx2 campaigns in the GoPhish dashboard and a real-time end-to-end encrypted feed https://github.com/fin3ss3g0d/evilgophish
- evilgophish - Phishing/Smishing Framework With Pusher End-To-End Encrypted Live Feed
- EvilPhish adds SMS campaign support via Twilio
- evilgophish Now Supports SMS Smishing Campaigns
PhishDock
What are some alternatives?
evilginx2 - Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
GoPhish-Templates - GoPhish Templates that I have retired and/or templates I've recreated.
webusb - Connecting hardware to the web.
Red-Team-Infrastructure-Wiki - Wiki to collect Red Team infrastructure hardening resources
Evilginx2-Phishlets - Evilginx2 Phishlets version (0.2.3) Only For Testing/Learning Purposes
docker-compose-laravel - A simple shell script to run a Laravel application in docker container with nginx,mysql and php service using docker-compose.
gogophish - Fly into Gophish with One Click (Infra Automation)
gophish - Open-Source Phishing Toolkit
community-images - :gem: RapidFort hardened secure images