{"full_name":"kgretzky/evilginx2","owner":"kgretzky","name":"evilginx2","url":"https://github.com/kgretzky/evilginx2","description":"Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication","homepage":"","topics":[],"language":"Go","license":"BSD-3-Clause","avatar":"https://avatars.githubusercontent.com/u/19260967?u=220f620ddd124b2532e92444d41c47cb8c58283b&v=4","created_at":"2018-07-10T09:59:52Z","pushed_at":"2026-06-10T12:12:03Z","metrics":{"stars":15890,"forks":2768,"watchers":364,"issues":0,"prs":200,"releases":8,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":0},"growth":{"day":{"stars":17,"forks":3,"base_day":"2026-11-09"}},"history":{"dates":["2026-11-09","2026-11-10"],"stars":[15873,15890],"forks":[2765,2768],"watchers":[364,364],"issues_open":[null,null],"prs_open":[null,null]},"boards":{},"same_owner":[],"issues":[],"discussions":[],"latest_release":{"name":"3.3.0 - Go & Phish","tag":"v3.3.0","published_at":"2024-04-02T13:34:24Z","body":"### Go & Phish - Official Gophish integration released!\r\nYou can learn more about this update in the official blog post: https://breakdev.org/evilginx-3-3-go-phish/\r\n\r\n### CHANGELOG\r\n- Feature: Official GoPhish integration, using the fork: https://github.com/kgretzky/gophish\r\n- Feature: Added support to load custom TLS certificates from a public certificate file and a private key file stored in `~/.evilginx/crt/sites/<hostname>/`. Will load `fullchain.pem` and `privkey.pem` pair or a combination of a `.pem`/`.crt` (public certificate) and a `.key` (private key) file. Make sure to run without `-developer` flag and disable autocert retrieval with `config autocert off`.\r\n- Feature: Added ability to inject `force_post` POST parameters into JSON content body (by [@yudasm_](https://twitter.com/yudasm_)).\r\n- Feature: Added ability to disable automated TLS certificate retrieval from LetsEncrypt with `config autocert <on/off>`.\r\n- Feature: Evilginx will now properly recognize origin IP for requests coming from behind a reverse proxy (nginx/apache2/cloudflare/azure).\r\n- Fixed: Infinite redirection loop if the lure URL path was the same as the login path defined in the phishlet.\r\n- Fixed: Added support for exported cookies with names prefixed with `__Host-` and `__Secure-`.\r\n- Fixed: Global `unauth_url` can now be set to an empty string to have the server return `403` on unauthorized requests.\r\n- Fixed: Unauthorized redirects and blacklisting would be ignored for `proxy_hosts` with `session: false` (default) making it easy to detect evilginx by external scanners.\r\n- Fixed: IP address `127.0.0.1` is now ignored from being added to the IP blacklist.\r\n- Fixed: Added support for more TLDs to use with phishing domains (e.g. `xyz`, `art`, `tech`, `wiki`, `lol` & more)\r\n- Fixed: Credentials will now be captured also from intercepted requests."},"readme":true,"readme_zh":false,"news":[],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}