Evilginx2

Reverse-proxy phishing framework that captures session cookies — bypasses OTP, push, and FIDO2 MFA.

Concept

Unlike GoPhish (clone page), Evilginx2 proxies the real site. The victim interacts with the legitimate service; Evilginx captures the authenticated session cookie and credentials in transit.

Quick Start

# Start evilginx2
evilginx2