How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
This tool has been released along with a FireEye blog post. The blog post can be found at the following link: https://www.fireeye.com/blog/threat-research/2018/02/reelphish-real-time-two-factor-phishing-tool.html
Evilginx2 is a man-in-the-middle phishing framework designed to proxy authentication traffic between a user and a target web service. By acting as a reverse proxy, the tool intercepts and relays web requests to capture credentials and session tokens in real time, enabling the bypass of multi-factor authentication mechanisms through session cookie hijacking. The platform distinguishes itself by integrating infrastructure orchestration with modular template-driven content injection. It automates the deployment of proxy servers, manages the lifecycle of encryption certificates, and applies conte
Modlishka is a man-in-the-middle reverse proxy framework designed for automated phishing campaigns. It dynamically generates valid TLS certificates for target domains, aggregates traffic from multiple domains through a single proxy, and injects custom scripts into proxied responses. The framework operates transparently without requiring client-side certificate installation and relays two-factor authentication steps to capture secondary verification tokens. What sets Modlishka apart is its ability to automate the entire credential theft process. It logs all form submissions, headers, and cooki
CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM.
Phishing Campaign Toolkit
The main features of securestate/king-phisher are: Offensive Security, Phishing Defense and Awareness, Security And Forensics, Social Engineering, Social Engineering Tools.
Projects with overlapping indexed features include: kgretzky/evilginx2 — Evilginx2 is a man-in-the-middle phishing framework designed to proxy authentication traffic between a user and a… ryhanson/phishery — An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector. drk1wi/modlishka — Modlishka is a man-in-the-middle reverse proxy framework designed for automated phishing campaigns. It dynamically… fireeye/reelphish — This tool has been released along with a FireEye blog post. The blog post can be found at the following link:… ring0lab/catphish — CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM. s0md3v/xsstrike — XSStrike is an automated security scanning engine designed for web application discovery, input.