search

kgretzky / evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
BSD 3-Clause "New" or "Revised" License
10.72k stars 1.94k forks source link

o365 and outlook is not intercepting the tokens #833

Closed Bivin4205 closed 1 year ago

Bivin4205 commented 2 years ago

Hi

I just tried every way and updated the Phishlets .yml file as well.

Password and username is been intercepting. But the token is not intercepting.

Thanks and Regards Bivin

TeddyBlue commented 2 years ago

im working with the 0365 phishlet. Am trying to configure ADFS ... im unable to get it to capture user and pass ... could you help me out? Thanks in advance

Westsideff commented 2 years ago

Hi

I just tried every way and updated the Phishlets .yml file as well.

Password and username is been intercepting. But the token is not intercepting.

Thanks and Regards

Bivin

Hello bro how do you get to configure your o365 phishlet to capture username and password? Mine after generating the login link, I tried it on my device and I was only able to put the username and it redirected me to an error page unable to connect. How could you help please

TeddyBlue commented 2 years ago

is yours using adfs? Mine is not grabbing creds ... using this https://github.com/kgretzky/evilginx2/wiki/Phishlet-File-Format-(2.3.0)

ghoxt007 commented 2 years ago

i can set up evilginx and i have working O365 phishlet, telegram me, @ghoxt007, test before paying

TeddyBlue commented 2 years ago

Price?Sent from my iPhoneOn Sep 21, 2022, at 1:18 PM, Ghoxt @.***> wrote: i can set up evilginx and i have working O365 phishlet, telegram me, @ghoxt007, test before paying

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you commented.Message ID: @.***>

Worldworm1 commented 1 year ago

@westsideff use only office 365 credentials to test don't use outlook or hotmail

eodirah commented 1 year ago

@Worldworm1 please can you send your telegram id so you can guide me, my domain gets blocked easily

Worldworm1 commented 1 year ago

@eodirah add me on ICQ jasonfri13