kgretzky / evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
BSD 3-Clause "New" or "Revised" License
10.26k stars 1.87k forks source link

my team & i use evilginx 2-3 days a week, i would like to request a suggestion... #946

Open pleaseanswerme101 opened 10 months ago

pleaseanswerme101 commented 10 months ago

DO NOT ASK FOR PHISHLETS. DO NOT ASK FOR HELP CREATING PHISHLETS. DO NOT ASK TO FIX PHISHLETS. DO NOT ADVERTISE OR TRY TO SELL PHISHLETS. EXPECT A BAN OTHERWISE. THANK YOU! REPORT ONLY BUGS OR FEATURE SUGGESTIONS.

sorry but i have searched all over to find someone that could point me in the correct direction, what i want to say, which is kind of asking for help but at the same time i dont want to piss anyone off and get banned but... my team of just three, we proceed with contract work for specific companies "network handling" "pen test" etc all that, not so much coding though, but since we have been using evilginx tool for id say a year and roughly 7 months we have thoroughly enjoyed it, it always works and is the most reliable tool for the job, now most of the companies we contract for, have in the past and present, requested us to pentest their website pages, specifically the login sections etc etc and then to proceed with sending emails to all the employees right, which is no problem easy to do but since we mainly just use evilginx we thought "how can we successfully add our companies websites html's etc pages to your phishlets scheme, now we have tried to, i wouldnt be here seeking "h*lp" if i didnt try already, i have messed around but i couldnt quite get/or figure out how id implement a custom page, so im am kindly seeking someone who may possibly have a idea or experience with implementing this, now please dont get me wrong i am not trying to break the rules here i am sorry but i really couldnt find such helpful help, since this is the place where the most people know about this tool dwell

this ones for your kuda!

do note you do not have to this your not entirely interested or have the time, however im happy to pay you for this too, but... what about maybe a custom option that allows you to import your own HTML for your select chosen website, and at the same time keeping all the juicey bits of evilginx in the mix, meaning nothing will change about the phishlet, only the website page, essentially allowing people like me and my peers and others to make great use of your tool in a customisation-al way, allowing us to use this tool with companies that wish to educate their employees about these types of attacks, since this tool grabs cookies its a must have and is important for employees to be educated about not just phishing about how MITM attacks work how how evilginx acts as a proxy before redirecting the traffic to the final destination essentially intercepting requests etc, hope you end up reading this, much love and support always! <3

or even just drop me a link or two that will point me in the correct direction,, then again i dont want to get banned i am a heavy user of this tool, and just want to play with it a bit more

Jill60 commented 10 months ago

DO NOT ASK FOR PHISHLETS. DO NOT ASK FOR HELP CREATING PHISHLETS. DO NOT ASK TO FIX PHISHLETS. DO NOT ADVERTISE OR TRY TO SELL PHISHLETS. EXPECT A BAN OTHERWISE. THANK YOU! REPORT ONLY BUGS OR FEATURE SUGGESTIONS.

sorry but i have searched all over to find someone that could point me in the correct direction, what i want to say, which is kind of asking for help but at the same time i dont want to piss anyone off and get banned but... my team of just three, we proceed with contract work for specific companies "network handling" "pen test" etc all that, not so much coding though, but since we have been using evilginx tool for id say a year and roughly 7 months we have thoroughly enjoyed it, it always works and is the most reliable tool for the job, now most of the companies we contract for, have in the past and present, requested us to pentest their website pages, specifically the login sections etc etc and then to proceed with sending emails to all the employees right, which is no problem easy to do but since we mainly just use evilginx we thought "how can we successfully add our companies websites html's etc pages to your phishlets scheme, now we have tried to, i wouldnt be here seeking "h*lp" if i didnt try already, i have messed around but i couldnt quite get/or figure out how id implement a custom page, so im am kindly seeking someone who may possibly have a idea or experience with implementing this, now please dont get me wrong i am not trying to break the rules here i am sorry but i really couldnt find such helpful help, since this is the place where the most people know about this tool dwell

this ones for your kuda!

do note you do not have to this your not entirely interested or have the time, however im happy to pay you for this too, but... what about maybe a custom option that allows you to import your own HTML for your select chosen website, and at the same time keeping all the juicey bits of evilginx in the mix, meaning nothing will change about the phishlet, only the website page, essentially allowing people like me and my peers and others to make great use of your tool in a customisation-al way, allowing us to use this tool with companies that wish to educate their employees about these types of attacks, since this tool grabs cookies its a must have and is important for employees to be educated about not just phishing about how MITM attacks work how how evilginx acts as a proxy before redirecting the traffic to the final destination essentially intercepting requests etc, hope you end up reading this, much love and support always! <3

If I understand you correctly,you are trying to make a custom phishlets for any given website right?There are lots of informations free on how to do so but what i may advice you to do is buy the 399$ course from @kgretzky.That course will point you towards the right direction.I believe that's all you need for a start.

pleaseanswerme101 commented 10 months ago

DO NOT ASK FOR PHISHLETS. DO NOT ASK FOR HELP CREATING PHISHLETS. DO NOT ASK TO FIX PHISHLETS. DO NOT ADVERTISE OR TRY TO SELL PHISHLETS. EXPECT A BAN OTHERWISE. THANK YOU! REPORT ONLY BUGS OR FEATURE SUGGESTIONS. sorry but i have searched all over to find someone that could point me in the correct direction, what i want to say, which is kind of asking for help but at the same time i dont want to piss anyone off and get banned but... my team of just three, we proceed with contract work for specific companies "network handling" "pen test" etc all that, not so much coding though, but since we have been using evilginx tool for id say a year and roughly 7 months we have thoroughly enjoyed it, it always works and is the most reliable tool for the job, now most of the companies we contract for, have in the past and present, requested us to pentest their website pages, specifically the login sections etc etc and then to proceed with sending emails to all the employees right, which is no problem easy to do but since we mainly just use evilginx we thought "how can we successfully add our companies websites html's etc pages to your phishlets scheme, now we have tried to, i wouldnt be here seeking "h*lp" if i didnt try already, i have messed around but i couldnt quite get/or figure out how id implement a custom page, so im am kindly seeking someone who may possibly have a idea or experience with implementing this, now please dont get me wrong i am not trying to break the rules here i am sorry but i really couldnt find such helpful help, since this is the place where the most people know about this tool dwell this ones for your kuda! do note you do not have to this your not entirely interested or have the time, however im happy to pay you for this too, but... what about maybe a custom option that allows you to import your own HTML for your select chosen website, and at the same time keeping all the juicey bits of evilginx in the mix, meaning nothing will change about the phishlet, only the website page, essentially allowing people like me and my peers and others to make great use of your tool in a customisation-al way, allowing us to use this tool with companies that wish to educate their employees about these types of attacks, since this tool grabs cookies its a must have and is important for employees to be educated about not just phishing about how MITM attacks work how how evilginx acts as a proxy before redirecting the traffic to the final destination essentially intercepting requests etc, hope you end up reading this, much love and support always! <3

If I understand you correctly,you are trying to make a custom phishlets for any given website right?There are lots of informations free on how to do so but what i may advice you to do is buy the 399$ course from @kgretzky.That course will point you towards the right direction.I believe that's all you need for a start.

thank you good sir, does his course provide such information? also thank you for the response! yes i couldnt only find 1 youtube video on this but it wasnt straight forward enough for me to understand fully, but i will purchase this course, as a gesture of respect to the creator, also would be useful learning some code here and there, thank you!

pleaseanswerme101 commented 10 months ago

DO NOT ASK FOR PHISHLETS. DO NOT ASK FOR HELP CREATING PHISHLETS. DO NOT ASK TO FIX PHISHLETS. DO NOT ADVERTISE OR TRY TO SELL PHISHLETS. EXPECT A BAN OTHERWISE. THANK YOU! REPORT ONLY BUGS OR FEATURE SUGGESTIONS. sorry but i have searched all over to find someone that could point me in the correct direction, what i want to say, which is kind of asking for help but at the same time i dont want to piss anyone off and get banned but... my team of just three, we proceed with contract work for specific companies "network handling" "pen test" etc all that, not so much coding though, but since we have been using evilginx tool for id say a year and roughly 7 months we have thoroughly enjoyed it, it always works and is the most reliable tool for the job, now most of the companies we contract for, have in the past and present, requested us to pentest their website pages, specifically the login sections etc etc and then to proceed with sending emails to all the employees right, which is no problem easy to do but since we mainly just use evilginx we thought "how can we successfully add our companies websites html's etc pages to your phishlets scheme, now we have tried to, i wouldnt be here seeking "h*lp" if i didnt try already, i have messed around but i couldnt quite get/or figure out how id implement a custom page, so im am kindly seeking someone who may possibly have a idea or experience with implementing this, now please dont get me wrong i am not trying to break the rules here i am sorry but i really couldnt find such helpful help, since this is the place where the most people know about this tool dwell this ones for your kuda! do note you do not have to this your not entirely interested or have the time, however im happy to pay you for this too, but... what about maybe a custom option that allows you to import your own HTML for your select chosen website, and at the same time keeping all the juicey bits of evilginx in the mix, meaning nothing will change about the phishlet, only the website page, essentially allowing people like me and my peers and others to make great use of your tool in a customisation-al way, allowing us to use this tool with companies that wish to educate their employees about these types of attacks, since this tool grabs cookies its a must have and is important for employees to be educated about not just phishing about how MITM attacks work how how evilginx acts as a proxy before redirecting the traffic to the final destination essentially intercepting requests etc, hope you end up reading this, much love and support always! <3

If I understand you correctly,you are trying to make a custom phishlets for any given website right?There are lots of informations free on how to do so but what i may advice you to do is buy the 399$ course from @kgretzky.That course will point you towards the right direction.I believe that's all you need for a start.

its mainly because i have no knowledge for YAML and GO etc so i wouldnt know how to circumvent the errors i produced when trying to import and configure my page, i know it not as simple as just pasting your select HTML code into where its suppose to be is it? would you be kind enough to tell me or even drop a link to what code needs to me edited to suit a custom html

Jill60 commented 10 months ago

DO NOT ASK FOR PHISHLETS. DO NOT ASK FOR HELP CREATING PHISHLETS. DO NOT ASK TO FIX PHISHLETS. DO NOT ADVERTISE OR TRY TO SELL PHISHLETS. EXPECT A BAN OTHERWISE. THANK YOU! REPORT ONLY BUGS OR FEATURE SUGGESTIONS. sorry but i have searched all over to find someone that could point me in the correct direction, what i want to say, which is kind of asking for help but at the same time i dont want to piss anyone off and get banned but... my team of just three, we proceed with contract work for specific companies "network handling" "pen test" etc all that, not so much coding though, but since we have been using evilginx tool for id say a year and roughly 7 months we have thoroughly enjoyed it, it always works and is the most reliable tool for the job, now most of the companies we contract for, have in the past and present, requested us to pentest their website pages, specifically the login sections etc etc and then to proceed with sending emails to all the employees right, which is no problem easy to do but since we mainly just use evilginx we thought "how can we successfully add our companies websites html's etc pages to your phishlets scheme, now we have tried to, i wouldnt be here seeking "h*lp" if i didnt try already, i have messed around but i couldnt quite get/or figure out how id implement a custom page, so im am kindly seeking someone who may possibly have a idea or experience with implementing this, now please dont get me wrong i am not trying to break the rules here i am sorry but i really couldnt find such helpful help, since this is the place where the most people know about this tool dwell this ones for your kuda! do note you do not have to this your not entirely interested or have the time, however im happy to pay you for this too, but... what about maybe a custom option that allows you to import your own HTML for your select chosen website, and at the same time keeping all the juicey bits of evilginx in the mix, meaning nothing will change about the phishlet, only the website page, essentially allowing people like me and my peers and others to make great use of your tool in a customisation-al way, allowing us to use this tool with companies that wish to educate their employees about these types of attacks, since this tool grabs cookies its a must have and is important for employees to be educated about not just phishing about how MITM attacks work how how evilginx acts as a proxy before redirecting the traffic to the final destination essentially intercepting requests etc, hope you end up reading this, much love and support always! <3

If I understand you correctly,you are trying to make a custom phishlets for any given website right?There are lots of informations free on how to do so but what i may advice you to do is buy the 399$ course from @kgretzky.That course will point you towards the right direction.I believe that's all you need for a start.

its mainly because i have no knowledge for YAML and GO etc so i wouldnt know how to circumvent the errors i produced when trying to import and configure my page, i know it not as simple as just pasting your select HTML code into where its suppose to be is it? would you be kind enough to tell me or even drop a link to what code needs to me edited to suit a custom html

This is not possible except you are looking for someone that will help you make one.Is either you learn to do it which is what i've suggested that you buy his course or pay someone to make one for you.https://help.evilginx.com/docs/phishlet-format is what you need to make any phishlets but you still need some tutorials to be able to apply it.

Jill60 commented 10 months ago

DO NOT ASK FOR PHISHLETS. DO NOT ASK FOR HELP CREATING PHISHLETS. DO NOT ASK TO FIX PHISHLETS. DO NOT ADVERTISE OR TRY TO SELL PHISHLETS. EXPECT A BAN OTHERWISE. THANK YOU! REPORT ONLY BUGS OR FEATURE SUGGESTIONS. sorry but i have searched all over to find someone that could point me in the correct direction, what i want to say, which is kind of asking for help but at the same time i dont want to piss anyone off and get banned but... my team of just three, we proceed with contract work for specific companies "network handling" "pen test" etc all that, not so much coding though, but since we have been using evilginx tool for id say a year and roughly 7 months we have thoroughly enjoyed it, it always works and is the most reliable tool for the job, now most of the companies we contract for, have in the past and present, requested us to pentest their website pages, specifically the login sections etc etc and then to proceed with sending emails to all the employees right, which is no problem easy to do but since we mainly just use evilginx we thought "how can we successfully add our companies websites html's etc pages to your phishlets scheme, now we have tried to, i wouldnt be here seeking "h*lp" if i didnt try already, i have messed around but i couldnt quite get/or figure out how id implement a custom page, so im am kindly seeking someone who may possibly have a idea or experience with implementing this, now please dont get me wrong i am not trying to break the rules here i am sorry but i really couldnt find such helpful help, since this is the place where the most people know about this tool dwell this ones for your kuda! do note you do not have to this your not entirely interested or have the time, however im happy to pay you for this too, but... what about maybe a custom option that allows you to import your own HTML for your select chosen website, and at the same time keeping all the juicey bits of evilginx in the mix, meaning nothing will change about the phishlet, only the website page, essentially allowing people like me and my peers and others to make great use of your tool in a customisation-al way, allowing us to use this tool with companies that wish to educate their employees about these types of attacks, since this tool grabs cookies its a must have and is important for employees to be educated about not just phishing about how MITM attacks work how how evilginx acts as a proxy before redirecting the traffic to the final destination essentially intercepting requests etc, hope you end up reading this, much love and support always! <3

If I understand you correctly,you are trying to make a custom phishlets for any given website right?There are lots of informations free on how to do so but what i may advice you to do is buy the 399$ course from @kgretzky.That course will point you towards the right direction.I believe that's all you need for a start.

its mainly because i have no knowledge for YAML and GO etc so i wouldnt know how to circumvent the errors i produced when trying to import and configure my page, i know it not as simple as just pasting your select HTML code into where its suppose to be is it? would you be kind enough to tell me or even drop a link to what code needs to me edited to suit a custom html

pm here:https://t.me/Dlenny100