Evilginx

EvilginxX is a man-in-the-middle (MITM) attack framework used for advanced phishing and red team assessments. It bypasses 2FA by proxying a victim’s session in real-time, capturing valid authentication tokens. Designed for stealth and flexibility, EvilginxX is highly customizable via YAML-based phishlets that define login flows for targeted platforms. Ideal for adversary simulation, it’s a powerful tool for demonstrating the risks of token-based authentication and educating on modern phishing threats.