evilginx2 README

The project's README from github.com/kgretzky/evilginx2. As one markdown file: README.md.

Evilginx2 Logo

Evilginx2 Title

Evilginx 3.0

Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection.

This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server to provide man-in-the-middle functionality to act as a proxy between a browser and phished website. Present version is fully written in GO as a standalone application, which implements its own HTTP and DNS server, making it extremely easy to set up and use.

Screenshot

Disclaimer

I am very much aware that Evilginx can be used for nefarious purposes. This work is merely a demonstration of what adept attackers can do. It is the defender's responsibility to take such attacks into consideration and find ways to protect their users against this type of phishing attacks. Evilginx should be used only in legitimate penetration testing assignments with written permission from to-be-phished parties.

Evilginx Pro is now available!

This is it! After over two years of development, countless delays, and hundreds of manual company verifications, concluded with multiple hurdles related to export regulations, Evilginx Pro is finally live!

Evilginx Mastery

Evilginx Pro is the fruit of a passion I've had for a long time in developing offensive security tools for cybersecurity enthusiasts. The journey has just begun, and now that the product is officially released, I can focus on making it even better by implementing all the ideas I've planned for it.

Key features:

Find out more on the official release blog post.

Evilginx Mastery Training Course

If you want everything about reverse proxy phishing with Evilginx - check out my Evilginx Mastery course!

Evilginx Mastery

Learn everything about the latest methods of phishing, using reverse proxying to bypass Multi-Factor Authentication. Learn to think like an attacker, during your red team engagements, and become the master of phishing with Evilginx.

Grab it here: https://academy.breakdev.org/evilginx-mastery

Official Gophish integration

If you'd like to use Gophish to send out phishing links compatible with Evilginx, please use the official Gophish integration with Evilginx 3.3. You can find the custom version here in the forked repository: Gophish with Evilginx integration

If you want to learn more about how to set it up, please follow the instructions in this blog post

Write-ups

If you want to learn more about reverse proxy phishing, I've published extensive blog posts about Evilginx here:

Evilginx 2.0 - Release

Evilginx 2.1 - First Update

Evilginx 2.2 - Jolly Winter Update

Evilginx 2.3 - Phisherman's Dream

Evilginx 2.4 - Gone Phishing

Evilginx 3.0

Evilginx 3.2

Evilginx 3.3

Help

In case you want to learn how to install and use Evilginx, please refer to online documentation available at:

https://help.evilginx.com

Support

I DO NOT offer support for providing or creating phishlets. I will also NOT help you with creation of your own phishlets. Please look for ready-to-use phishlets, provided by other people.

License

evilginx2 is made by Kuba Gretzky (@mrgretzky) and it's released under BSD-3 license.

evilginx2 (kgretzky/evilginx2)

Searching Database…

15.7K ·GitHub
这是什么?Evilginx 是一个中间人攻击框架,用于钓取登录凭据以及会话 Cookie,从而让攻击者绕过双因素认证。
这个工具是像原版 Evilginx 一样基于 nginx 构建的,还是采用其他方式实现?不是。这个版本(3.0)完全用 Go 重写,是一个独立应用,自带 HTTP 和 DNS 服务器,取代了 2017 年原始版本中基于 nginx 的代理。
我该怎么把它跑起来?你可以用 Go 和 'make' 自行构建,因为它是一个独立的 Go 二进制程序,不依赖外部代理;也可以按照官方在线文档完成完整的安装和使用步骤。
构建它是否需要现有的 nginx 环境,或者除了 Go 之外还需要别的东西?不需要。它完全用 Go 编写,通过 'make' 编译成一个独立的二进制文件;2017 年版本中对 nginx 代理的依赖已经去除。
维护者会帮我制作 phishlets 吗?不会。作者明确拒绝提供或协助制作 phishlets,所以你需要自己从社区获取现成的版本。
这个工具是为谁准备的?面向在获得授权的项目中工作的渗透测试人员和红队成员。作者声明,只能在获得目标方书面许可的合法渗透测试中使用。
Evilginx Pro 是什么?它与这个开源工具有什么区别?Evilginx Pro 是一款独立的付费产品,基于相同的反向代理钓鱼理念,新增了规避钓鱼检测、维护中的 phishlets 数据库、机器人拦截(Botguard)、通配符 TLS 证书以及自动化服务器部署等功能,这些都不在这个免费仓库中。
我能通过 Gophish 发送 Evilginx 的钓鱼链接吗?可以。有一个官方分支的 Gophish 集成,兼容 Evilginx 3.3,可用于运行与 Evilginx 联动的钓鱼活动。
有没有学习使用这个工具进行反向代理钓鱼的课程?有。作者出售一门名为“Evilginx Mastery”的培训课程,涵盖反向代理钓鱼以及针对红队工作的绕过多因素认证内容。
为什么要把 Evilginx 从 nginx 改写为 Go?目的是让它成为完全独立的工具,内置自己的 HTTP 和 DNS 服务器,无需单独配置 nginx 代理,从而简化安装设置。
Creator
kgretzky
Size
7.7 MB
Stars
15.7K
Age
8y
Commits · 90 Days