drk1wi/Modlishka
Modlishka
Modlishka is a man-in-the-middle reverse proxy framework designed for automated phishing campaigns. It dynamically generates valid TLS certificates for target domains, aggregates traffic from multiple domains through a single proxy, and injects custom scripts into proxied responses. The framework operates transparently without requiring client-side certificate installation and relays two-factor authentication steps to capture secondary verification tokens.
What sets Modlishka apart is its ability to automate the entire credential theft process. It logs all form submissions, headers, and cookies to capture plaintext credentials and session tokens, and provides a web-based panel for viewing captured sessions and impersonating authenticated users. Pre-configured phishing templates allow rapid deployment of phishing proxies, while pattern-based content injection enables granular control over payload delivery.
The framework also supports arbitrary domain proxying, meaning it can intercept traffic to any website without the target user installing certificates. It handles most common two-factor authentication schemes automatically, and the captured session management panel allows attackers to hijack active sessions for impersonation.
Features
- MITM Phishing Frameworks - A reverse proxy that intercepts HTTPS traffic to capture credentials, session tokens, and bypass two-factor authentication for targeted phishing attacks.
- Proxied Payload Injections - Injects custom JavaScript payloads into proxied web pages using pattern-based matching rules.
- Reverse Proxy Interceptors - Acts as a reverse proxy between user and target site to intercept all transmitted data.
- Multi-Domain Proxies - Aggregates traffic from multiple domains through a single proxy without client certificate installation.
- Phishing Proxies - Sets up a transparent reverse proxy that intercepts traffic between a target user and a real website to capture credentials.
- MITM Credential Harvesters - Intercepts login credentials, session tokens, and URL parameters from proxied traffic via form submission logging.
- Active 2FA Bypass Proxies - Automatically handles common 2FA schemes during proxied sessions to capture credentials despite extra verification steps.
- MITM - Operates as a man-in-the-middle reverse proxy that proxies arbitrary domains without requiring client certificate installation.
- Proxy-Based Phishing Campaign Deployers - Quickly deploys phishing proxies with pre-built configuration templates and pattern-based script injection rules.
- Transparent 2FA Relayers - Relays two-factor authentication steps transparently through the proxy to capture secondary verification tokens.
- Automatic HTTPS Proxies - Automatically generates TLS certificates for HTTPS man-in-the-middle interception.
- Proxy Templates - Provides pre-configured proxy templates for rapid phishing campaign deployment.
- Dynamic MITM Certificate Generators - Generates valid TLS certificates on the fly for target domains using a configurable internal certificate authority.
- Session Impersonators - Uses captured session tokens from a web panel to impersonate authenticated users on the target site.
- Captured Session Managers - Manages captured sessions by viewing harvested credentials and impersonating authenticated users from a web panel.
- Session Management Panels - Provides a web panel for viewing captured sessions, impersonating authenticated users, and managing harvested credential data.
- Pattern-Matched Injections - Injects custom scripts into proxied responses based on configurable URL or content pattern matching rules.
- Phishing - Reverse proxy for advanced phishing campaigns.
- Social Engineering - Reverse proxy framework for phishing operations.
- Social Engineering Tools - Reverse proxy for real-time 2FA phishing attacks.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
