search

kgretzky / evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
BSD 3-Clause "New" or "Revised" License
10.72k stars 1.94k forks source link

Lures url #236

Closed jelledesnelle closed 5 years ago

jelledesnelle commented 5 years ago

Hello, I am testing Evilginx2 on my localhost. My config domain is phishing-domain.com But here is my problem: If i create a new lure for as example okta it says okta.phishing-domain.com

I just want only phishing-domain.com, instagram works fine but okta and many other phishlets the url starts with root domain name such as okta. I dont know why?

Kind regards,

bedilbek commented 5 years ago

You have to create one subdomain for each phishlet, because your phishing-domain.com identifies your main domain for all other phishlets, I think it is not correct to assign main domain to any phishlet

jelledesnelle commented 5 years ago

On localhost it does not matter i think. But instagram phishlets it is phishing-domain.com and for many other phishlets it is automaticly for example okta.phishing-domain.com

jelledesnelle commented 5 years ago

Got it