Evilginx

Health v2 · maintenance only

Adoption not part of the score

15535 stars · 2708 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Evilginx is a standalone man-in-the-middle attack framework written in Go that proxies traffic between a victim's browser and a legitimate website to phish login credentials and session cookies. By capturing session cookies, it enables attackers to bypass two-factor authentication, and it implements its own HTTP and DNS servers for easy deployment.

Use cases

• phish login credentials during authorized penetration tests
• capture session cookies to bypass 2FA in red team engagements
• set up a man-in-the-middle proxy for a target website
• test phishing detection and user awareness defenses
• demonstrate 2FA bypass risks to stakeholders

When to choose

• you are conducting an authorized penetration test or red team exercise involving credential phishing
• you need a self-contained Go tool with built-in HTTP and DNS servers
• you want to demonstrate session cookie theft and 2FA bypass to defenders

When to avoid

• you lack written permission from the parties being phished
• you need a defensive tool for detecting phishing rather than performing it
• you require a GUI-based phishing simulation platform for enterprise awareness training

Facets

application · maturity active

http-server proxy security security penetration-testing go self-hosted mitm phishing credential-harvesting session-hijacking 2fa-bypass offensive-security dns-server phishlets linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="kgretzky/evilginx2")