Phish a User with MFA Enabled

• evilginx2

  30 9,953 7.4 Go

  Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

• evilgophish

  20 1,309 10.0 Go

  Discontinued evilginx3 + gophish

All evilginx2 fans checkout this project that provides campaign statistics for evilginx2 campaigns in the GoPhish dashboard and a real-time end-to-end encrypted feed https://github.com/fin3ss3g0d/evilgophish

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• Evilginx2-Phishlets

  2 248 10.0 CSS

  Discontinued Evilginx2 Phishlets version (0.2.3) Only For Testing/Learning Purposes

Think of Evilginx2 as a proxy which is completely trusted by the browser as it's based on nginx. It sends what it needs to Microsoft then it intercepts what you tell it to intercept based on what you code into the phishlet. If after authentication a session cookie is in the browser then it doesn't matter how it got there it can be reused. This is more of browser MITM than an interception of keys.Phishlet Examples

Suggest a related project