Evilginx @evilginx
I am the evil bot capturing your MFA tokens. Offensive security reverse-proxy phishing framework capable of bypassing MFA protections, created by @mrgretzky github.com/kgretzky/evilg… Joined May 2018-
Tweets33
-
Followers793
-
Following1
-
Likes36
The official MFA phishing anthem! 🍪💗🎵
The official MFA phishing anthem! 🍪💗🎵
🚨 The Black Friday sale is coming! The sale drops at midnight today! (UTC+1) It will be the biggest sale yet! 🤩
Black Friday is on 29th November this year. Just sayin'... 🤫
Merry Christmas everyone! ❄️☃️🎄 Wish you all the best and thank you for a great year! ✨️
Merry Christmas everyone! ❄️☃️🎄 Wish you all the best and thank you for a great year! ✨️
🚨 BLACK FRIDAY Evilginx Mastery -40% SALE 🚨 👑 40% discount (biggest yet!) ⏰ Only 24 hours Code: BLACKFRIDAY40SALE Link: academy.breakdev.org/evilginx-maste… Hurry! It's active only until tomorrow!
🚨 Evilginx Mastery Black Friday SALE is coming... tomorrow! 🔥 It will be the BIGGEST sale so far! 🤩 ⏰ Sale will last only 24 hours.
The @evilginx Mastery course is way too much fun 👀
The purpose of SMS/Push/# matching MFA was to put you past most victims and thus most toolsets. There was a point you were basically immune with legacy protocols turned off in Exchange. Now that stronger methods are normalized, attackers are targeting their weaknesses. Not done.
The purpose of SMS/Push/# matching MFA was to put you past most victims and thus most toolsets. There was a point you were basically immune with legacy protocols turned off in Exchange. Now that stronger methods are normalized, attackers are targeting their weaknesses. Not done.
Session hijacking a Microsoft 365 account! Stealing their credentials and bypassing MFA prompt with Evilginx: a reverse-proxy phishing framework! We stage a phishing domain and email pretense, and gain full access to the victim account! youtu.be/sZ22YulJwao
🚨 The big reveal of Evilginx Pro is finally OUT! 🚨 📔From this blog post you will learn what makes the Pro version different from the community one. 🎟️I explain how Evilpuppet secret token extraction works and showcase the core features. Enjoy! 🪝🐟 breakdev.org/evilginx-pro-r…
🎬Phishing LinkedIn and bypassing MFA demo created for the upcoming Evilginx Pro post 🔥 💡Evilginx uses a background browser to capture the secret token from legitimate website and inject it back into the reverse proxy phishing session. P.S. Enjoy that Cyberpunk tune I made 🎵
Patch to add custom DNS records in running instance of Evilginx made by @ojensen5115 🔥 This is getting added for good in upcoming updates.
🚨BREAKING: Evilginx 3.2 is OUT! 🪝🐟 To celebrate the release of the new update, here is the special 10% discount code for the Evilginx Mastery course! 🎁Code: EVILGINX32 (valid until 31st Aug) 🔗Link: academy.breakdev.org/evilginx-maste… breakdev.org/evilginx-3-2/
Finally my talk from @x33fcon is online! 🔥 I try my best to explain what websites could do to protect the users against reverse proxy phishing attacks like Evilginx.🪝🐟 There is also a bonus live demo at the end with some Evilginx Pro secret sauce! 💡 youtube.com/watch?v=C-Fh4s…
🎁 Who is excited for Evilginx 3.2 release NEXT WEEK? 🔥 One of the new features is the ability to pause your lures for fixed time duration. Useful if you want to prevent your lure URLs from being scanned right after you send them out or if you want to lay low for a day or two.
Override global redirect URL for each phishlet separately in the upcoming Evilginx 3.2 update 🔥 More features to come as well! Huge thanks to @0x_aalex for pitching this idea in his PR on GitHub.
Working on developing a dedicated phishing training lab with MFA support for the upcoming Evilginx Mastery course. Lab will simulate real-world phishing scenarios with different protections. Each lesson will teach how to develop a working phishlet hands-on for a given scenario.
John Hammond @_JohnHammond
300K Followers 3K Following Cybersecurity Researcher @HuntressLabs || Just Hacking Training @JustHackingHQ w/ @ethicalhacker || https://t.co/UtsNJiyQtS || https://t.co/narO3sz7y6
Kuba Gretzky @mrgretzky
16K Followers 710 Following Offensive security tools developer. Malware dev, bedroom DJ & ex-MMO game hacker. Creator of Evilginx / Bartender @ BREAKDEV RED. bsky: @mrgretzky.breakdev.org
d1rkmtr @d1rkmtr
8K Followers 467 Following
Alireza Salman @AlirezaaSalmann
0 Followers 3 Following
Pinochet’s Helicopt... @NsZoomer
26 Followers 53 Following American, President Trump’s #1 Goon, ✝️Christian nationalist✝️,🇺🇸 American Nationalist🇺🇸 Support ICE! Zach McClanahan For Illinois!
Eibel @Guevo26
115 Followers 1K Following
trAvis @trAvis_Ano
10 Followers 162 Following
Vincent Musau @vmakau_001
1 Followers 81 Following Aspiring smart contract auditor | Growing through Cyfrin Updarft @PatrickAlphaC | Passionate about blockchain security and precision in code
therealslimshady @dare4lslimshady
39 Followers 169 Following Legion Offensive Security | @LegionOffensive #defonotahacker👾
Mert @Mert298432
3 Followers 206 Following
woxy @woxy_404
17 Followers 307 Following
Ahmet Göker🇹🇷�... @_shadowintel_
4K Followers 689 Following Soyut düşünceler / Security (academic) 🇳🇱🇹🇷🇬🇧
THR @THRw27
0 Followers 86 Following
Mr Duddits @edsonsoaresramo
296 Followers 1K Following Senior Computational Scientist & Software Engineering. Love reading, writing and photography. #ComputationalScientist #SoftwareEngineer #reading #writing
Khalsa Kesari @killakhalsa
19 Followers 279 Following malware analyst, red teaming, ctf, original research
Cypher sage @CypherSage1
0 Followers 69 Following
Josh 🦄 @iamunicon
704 Followers 1K Following Proud Nigerian 🇳🇬 | Web Developer | Graphic Designer | Music Lover | Arsenal In My Blood 🩸 | CR7 💯 | Child of God 🥂
Joey Brooks @brooksjoey78
4 Followers 24 Following
jmarie @jmarie91666
20 Followers 385 Following
feelnowayz @feelnooowayz
1 Followers 47 Following
P I M P @PIMP149078
30 Followers 1K Following
twizzy rich @majorie80558
9 Followers 33 Following
Kripton @Kripton447652
0 Followers 26 Following
Harry's Food @Crypaffiliate4u
567 Followers 30 Following
Meisty @SuperMeisty
2K Followers 2K Following Lead Automation and Cybersecurity Engineer | CPTS | CWES | CTF Player | Ethical hacker | trying to learn something new everyday
佐少love @xiaozhi1024
66 Followers 279 Following
Adebayo Ogunlesi @bayoOgunlesiA
385 Followers 173 Following Adebayo Ogunlesi, Chairman & CEO of Global Infrastructure Partners, Senior MD at BlackRock. Leading global infra investments. Contact: [email protected]
Emmanuel Uwa @KingMan40082054
3 Followers 126 Following ✨Penetration Tester ✨Bug Hunter 🔥Passionately Curious
EstiEST @ElenaEstEsti
166 Followers 778 Following There are girls who want to shoot sex videos and earn more together (Estonia) beautiful while needed.
PhishPhinder @0xPhishPhinder
1 Followers 47 Following
KAY'SAR @Wallagnstthewnd
0 Followers 12 Following The willow prospers against the wind until one day it is many willows - A wall against the wind! That is the willow's purpose.
aosong rong @AosongR67528_
12 Followers 205 Following
DJ @ ꍏ ꈤ ꂦ ꈤ ... @Anonmous1975
206 Followers 1K Following Believing in individuality and freedom - IS OUR DUTY Antifa won ww2 now trump demonizes them and their bravery fck the donald #Anonymous
AgencyInt Marketplace @AgencyintM
15 Followers 419 Following @dataleakhouse @datavendo @databreachpremium @databaseindustry
CyberMechatro @vishwanath2332
1 Followers 80 Following 🪽 Aspiring cyber security Analyst & Cyber Commando |
king_abel_ @King_abel_
7 Followers 43 Following
Kuba Gretzky @mrgretzky
16K Followers 710 Following Offensive security tools developer. Malware dev, bedroom DJ & ex-MMO game hacker. Creator of Evilginx / Bartender @ BREAKDEV RED. bsky: @mrgretzky.breakdev.orgTrends for United States
You might like
