Skip to content

Man-in-the-middle attack framework used for phishing credentials and session cookies of any web service.

License

Notifications You must be signed in to change notification settings

bl4ckh0l3z/evilginx

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Evilginx

Evilginx

Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It's core runs on Nginx HTTP server, which utilizes proxy_pass and sub_filter to proxy and modify HTTP content, while intercepting traffic between client and server.

You can learn how it works and how to install everything yourself on my blog:

Evilginx - Advanced Phishing With Two-factor Authentication Bypass

Usage

usage: evilginx_parser.py [-h] -i INPUT -o OUTDIR -c CREDS [-x]

optional arguments:
  -h, --help            show this help message and exit
  -i INPUT, --input INPUT
                        Input log file to parse.
  -o OUTDIR, --outdir OUTDIR
                        Directory where output files will be saved.
  -c CREDS, --creds CREDS
                        Credentials configuration file.
  -x, --truncate        Truncate log file after parsing.

Example:

python evilginx_parser.py -i /var/log/evilginx-google.log -o ./logs -c google.creds

About

Man-in-the-middle attack framework used for phishing credentials and session cookies of any web service.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%