Reverse engineered to remove IOCs, added Exchange Online Protection IP blacklist and bing-bot user-agent blocking, DNS configuration and notes on usage.
☆163Apr 16, 2025Updated last year
Alternatives and similar repositories for evilginx2-TTPs
Users that are interested in evilginx2-TTPs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Evilginx Phishing Infrastructure Setup Guide - Securing Evilginx and Gophish Infrastructure, Removing IOCs, Phishing TTPs☆623Jun 3, 2025Updated last year
- Fetches AS Numbers associated with the specified organization, retrieves the IP prefixes for each AS Number, and writes the deduplicated …☆10Dec 1, 2023Updated 2 years ago
- Terms of Use Conditional Access M365 Evilginx Phishlet☆47Jun 23, 2025Updated last year
- Custom Evilginx2 Docker container without any IOCs or Evilginx Eggs..☆13Dec 13, 2021Updated 4 years ago
- Tracks a range of Microsoft owned ASNs and publishes a daily release containing a list of IPv4 and IPv6 address in CIDR notation.☆30Updated this week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- send Captured Evilginx sessions to Telegram , Mail and Discord☆28Feb 27, 2025Updated last year
- This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifical…☆754May 27, 2025Updated last year
- A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented b…☆464May 29, 2024Updated 2 years ago
- ☆20Dec 20, 2023Updated 2 years ago
- Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of …☆19Apr 4, 2023Updated 3 years ago
- Updated o365 Evilginx phishlet for WHfB☆95Mar 16, 2024Updated 2 years ago
- sturdy-chainsaw☆73Aug 10, 2023Updated 3 years ago
- Scripts to interact with Microsoft Graph APIs☆47Nov 7, 2024Updated last year
- Weaponized Browser-in-the-Middle (BitM) for Penetration Testers☆691Sep 18, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Bounces when a fish bites - Evilginx database monitoring with exfiltration automation☆189Jun 9, 2024Updated 2 years ago
- Automated Evilginx phishlet creator Extension for Burpsuite☆69Jan 10, 2025Updated last year
- A fork of the great TokenTactics with support for CAE and token endpoint v2☆471Sep 13, 2026Updated last month
- Refreshing Device Bound Session Credentials (DBSC) with Chromiums session store and the Windows CNG API☆31Jul 25, 2026Updated 3 months ago
- Browser streaming MITM proxy☆87Sep 5, 2023Updated 3 years ago
- evilginx3 + gophish☆2,040Jun 15, 2024Updated 2 years ago
- This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim …☆213Sep 19, 2025Updated last year
- Automated .NET AppDomain hijack payload generation☆129Feb 4, 2025Updated last year
- A Python POC for CRED1 over SOCKS5☆173Oct 5, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Cobalt Strike UDRL for memory scanner evasion.☆50Dec 4, 2023Updated 2 years ago
- This is the Git repository for the Modern Red Teaming workshop given at SINCON2024.☆13May 23, 2024Updated 2 years ago
- Easily obfuscate your html!☆102Apr 7, 2024Updated 2 years ago
- ☆61Jun 2, 2025Updated last year
- Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI☆1,423Aug 26, 2026Updated 2 months ago
- A flexible proxy for inspecting & transforming LDAP packets generated by any tool on the fly.☆248Sep 17, 2026Updated last month
- Remote operations commands implemented using Beacon Object Files☆1,199Oct 17, 2026Updated 2 weeks ago
- a demo module for the kaine agent to execute and inject assembly modules☆41Aug 28, 2024Updated 2 years ago
- Abusing Azure services over C2☆383Jan 20, 2026Updated 9 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆27Feb 11, 2025Updated last year
- Azure Post Exploitation Framework☆249Oct 27, 2025Updated last year
- A new AiTM attack framework — based on leveraging service workers — designed to conduct credential phishing campaigns. Thanks to its mini…☆166Aug 5, 2025Updated last year
- Hunting and injecting RWX 'mockingjay' DLLs in pure nim☆62Dec 11, 2024Updated last year
- Azure DevOps Services Attack Toolkit☆318Mar 15, 2025Updated last year
- A collection of Terraform projects, Ansible playbooks, and roles designed to build a Red Team infrastructure.☆17Oct 9, 2026Updated 3 weeks ago
- OAuth Device Code Phishing Toolkit☆140Apr 18, 2026Updated 6 months ago