search

kgretzky / evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
BSD 3-Clause "New" or "Revised" License
10.26k stars 1.87k forks source link

Country Whitelist on IP Addresses #868

Open Brasco opened 1 year ago

Brasco commented 1 year ago

We have added the possibility to specitfy a list of country allowed to contact the server. IP from other countries will be handled as the blacklisted ones. In order to make the whitelist work there should be a file called "country_whitelist.txt" in the ".evilginx2" directory containing the ISOCode of the whitelisted country (one per row). Furthermore the user shoul load and maintain updated the city mmdb from mastermind (GeoLite2-City.mmdb), always in the same folder. If one of those two files is missing the whitelist willl be disabled and a warning is shown on boot. However there is a place where I should document this functionality in case the PR is accepted?

Best regards,

owenreid01 commented 1 year ago

We have added the possibility to specify a list of country allowed to contact the server. IP from other countries will be handled as the blacklisted ones. In order to make the whitelist work there should be a file called "country_whitelist.txt" in the ".evilginx2" directory containing the ISOCode of the whitelisted country (one per row). Furthermore the user should load and maintain updated the city mmdb from mastermind (GeoLite2-City.mmdb), always in the same folder. If one of those two files is missing the whitelist will be disabled and a warning is shown on boot. However there is a place where I should document this functionality in case the PR is accepted?

Best regards,

Followed your instructions but getting this: error: Country Whitelist: open /root/.evilginx/GeoIP2-City.mmdb: no such file or directory

Brasco commented 1 year ago

Yeah sorry it was a typo in the documentation. you need to put the file "GeoLite2-City.mmdb" under the folder ".evilginx" not ".evilginx2" (the same thing for the file "country_whitelist.txt")