This tool has been released along with a FireEye blog post. The blog post can be found at the following link: https://www.fireeye.com/blog/threat-research/2018/02/reelphish-real-time-two-factor-phishing-tool.html
Evilginx2 is a man-in-the-middle phishing framework designed to proxy authentication traffic between a user and a target web service. By acting as a reverse proxy, the tool intercepts and relays web requests to capture credentials and session tokens in real time, enabling the bypass of multi-factor authentication mechanisms through session cookie hijacking. The platform distinguishes itself by integrating infrastructure orchestration with modular template-driven content injection. It automates the deployment of proxy servers, manages the lifecycle of encryption certificates, and applies conte
Modlishka is a man-in-the-middle reverse proxy framework designed for automated phishing campaigns. It dynamically generates valid TLS certificates for target domains, aggregates traffic from multiple domains through a single proxy, and injects custom scripts into proxied responses. The framework operates transparently without requiring client-side certificate installation and relays two-factor authentication steps to capture secondary verification tokens. What sets Modlishka apart is its ability to automate the entire credential theft process. It logs all form submissions, headers, and cooki
An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector
CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM.
ring0lab/catphish की मुख्य विशेषताएं हैं: Social Engineering, Social Engineering Tools।
ring0lab/catphish के ओपन-सोर्स विकल्पों में शामिल हैं: kgretzky/evilginx2 — Evilginx2 is a man-in-the-middle phishing framework designed to proxy authentication traffic between a user and a… securestate/king-phisher — Phishing Campaign Toolkit. drk1wi/modlishka — Modlishka is a man-in-the-middle reverse proxy framework designed for automated phishing campaigns. It dynamically… fireeye/reelphish — This tool has been released along with a FireEye blog post. The blog post can be found at the following link:… ryhanson/phishery — An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector. undeadsec/socialfish — SocialFish is a credential harvesting tool and phishing framework designed to intercept usernames, passwords, and…