evilginx

Bounces when a fish bites - Evilginx database monitoring with exfiltration automation

Phishlets for Evilginx2 (MITM proxy Framework)

Free o365.yaml and updated version of evilginx with all bypass methods included.

Build Phishlets profiles automatically and efficiently by logging into any website, registering cookies, and approving all the necessary data to create an excellent and ideal Phishlets profile.

EVILGINX Control Panel + Auto Installer - web C2 dashboard and one-click Ubuntu installer. Created by ZynTarvo.

Installs and sets up Gophish (Evilginx version) as a service.

RedHawk — Offensive red teaming suite for Windows (Electron + React + Tailwind)

A collection of custom phishlets for Evilginx.

Apache .htaccess + NGINX reverse proxy setup for advanced O365 phishing. Chains a compromised corporate site with Evilginx to keep victims on a legitimate domain throughout the auth flow.

BitB Attack Simulation

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Built a complete Chrome Manifest V3 browser extension that detects Adversary-in-the-Middle (AiTM) reverse proxy phishing attacks in real time. The extension runs 5 detection modules against every page load and produces a 0–100 threat score.