kgretzky/evilginx2

★15,892GoBSD-3-Clause⑂ 2,769Issue 0Updated Jun 10, 2026

View on GitHub ↗

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Evilginx 3.0: a self-contained Go proxy for phishing past 2FA — Evilginx is a man-in-the-middle phishing framework that captures login credentials and session cookies to bypass two-factor authentication. Version 3.0 rewrites the original nginx-based proxy entirely in Go, bundling its own HTTP and DNS servers for easier setup. Intended for authorized penetration testers and red teams studying credential-phishing and 2FA-bypass techniques.

Metrics

Retention can be computed 30 days after a repository first trends (it isn't shown until then). See About for how each metric is defined.

Star growth and Trending appearances (last 30 days)

Created Jul 10, 2018 · First on trending Nov 9, 2026

Other notable repositories in the same category (Security)

• finic-ai/kairosOpen-source fraud decisioning that your coding agent tunes via MCP
• Gramli/Gramli.FrameworkA Blog-Driven Playground Testing How Shopping Agents Get Manipulated
• nishant-Tiwari24/veilAn Electron-based Tor browser rebuilt by reverse-engineering the original
• sherlock-project/sherlockTrack a username's footprint across hundreds of social sites
• chris124567/cfsolveHeadless-browser-free Cloudflare Turnstile and challenge solving in Rust

See all Security repositories →