← All tools

Evilginx2

https://github.com/kgretzky/evilginx2

Open Source

Categories

Social Engineering Web Application

Description

Standalone man-in-the-middle attack framework that bypasses 2FA by proxying authentication sessions and capturing session cookies. Uses phishlets for site-specific configuration.

Keywords

MitM 2FA bypass session hijacking phishing reverse proxy phishlets OAuth cookie theft

Example Usage

evilginx2 -p phishlets/
phishlets hostname office365 phish.example.com
phishlets enable office365
lures create office365