Evilginx2 is a standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication. It is a powerful tool for simulating phishing attacks and can be used for penetration testing and security research. The framework allows attackers to steal login credentials and session cookies, and can bypass 2-factor authentication. It is a useful tool for security professionals to test the security of their systems and identify vulnerabilities. Evilginx2 is a powerful tool that can be used for malicious purposes, and its use should be limited to legitimate security testing and research purposes only.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
AzureC2Relay enhances security by validating and relaying Cobalt Strike beacon traffic through Azure Functions.
Explore the top million websites, ranked by referring subnets, and gain insights into online influence and popularity.
SharpShares efficiently enumerates and maps network shares and resolves names within a domain.
A CVE compliant archive of public exploits and corresponding vulnerable software, and a categorized index of Internet search engine queries designed to uncover sensitive information.
Generates randomized C2 profiles for Cobalt Strike to evade detection.
SharpEDRChecker scans system components to detect security products and tools.
A command that builds and executes command lines from standard input, allowing for the execution of commands with multiple arguments.
Kali Linux is a specialized Linux distribution for cybersecurity professionals, focusing on penetration testing and security auditing.
Tool for enumerating proxy configurations and generating CobaltStrike-compatible shellcode.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.