evilginx2
Developed by kgretzky
Evilginx is a man-in-the-middle (MitM) reverse proxy framework written in Go, primarily used for authorized red teaming and penetration testing. By proxying traffic between a victim's browser and the target website, it can capture credentials and session cookies in real-time, demonstrating how to bypass multi-factor authentication (MFA). It runs as a standalone application with its own built-in HTTP and DNS servers.
- Reverse proxy architecture
- MFA/2FA bypass capability via session hijacking
- Built-in standalone HTTP and DNS servers
- Automated server deployment and TLS configuration
- Phishing detection evasion and obfuscation (Pro version)
desktop