https://cybertoolchain.io/tools/evilginx2 New releases and features in evilginx2, tracked by The Cyber Toolchain. en Tue, 02 Apr 2024 13:34:24 GMT https://github.com/kgretzky/evilginx2/releases/tag/v3.3.0 https://github.com/kgretzky/evilginx2/releases/tag/v3.3.0 Tue, 02 Apr 2024 13:34:24 GMT Evilginx2 v3.3.0 adds official GoPhish integration, custom TLS loading, force_post injection, and autocert control. • Adds official integration with the GoPhish fork (`https://github.com/kgretzky/gophish`) for phishing campaign management • Enables loading custom TLS certificates from `fullchain.pem` and `privkey.pem` in `~/.evilginx/crt/sites/<hostname>/` or `.pem`/`.crt` and `.key` pairs • Adds ability to inject `force_post` POST parameters into JSON content body • Adds `config autocert <on/off>` setting to disable automated TLS certificate retrieval from LetsEncrypt Full history on Cyber Toolchain: https://cybertoolchain.io/tools/evilginx2 https://github.com/kgretzky/evilginx2/releases/tag/v3.2.0 https://github.com/kgretzky/evilginx2/releases/tag/v3.2.0 Thu, 24 Aug 2023 10:01:14 GMT v3.2.0 adds dynamic redirects, `lures pause`, phishlet `intercept` and global `redirect_url` • Adds `intercept` section in phishlets to intercept HTTP requests and return custom responses. • Adds optional `redirect_url` value in phishlet config to define default post-capture redirect (overridable by lure). • `phishlet unauth_url <phishlet> <url>` overrides the global unauthorized redirect URL for specific phishlets. Breaking changes: • The `redirect_url` setting in global config is renamed to `unauth_url`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/evilginx2 https://github.com/kgretzky/evilginx2/releases/tag/v3.1.0 https://github.com/kgretzky/evilginx2/releases/tag/v3.1.0 Tue, 11 Jul 2023 08:05:41 GMT Separate listening and external IPv4 addresses via new config subcommands • Adds `config ipv4 bind` subcommand to set the local listening address • Adds `config ipv4 external` subcommand to set the advertised external IP Full history on Cyber Toolchain: https://cybertoolchain.io/tools/evilginx2 https://github.com/kgretzky/evilginx2/releases/tag/v3.0.0 https://github.com/kgretzky/evilginx2/releases/tag/v3.0.0 Wed, 10 May 2023 09:13:22 GMT Evilginx2 v3 adds auto-renewing TLS via certmagic, JSON config format, phishlet templates with new CLI commands, and flexible auth token capture. • `certmagic` library now manages automated retrieval and renewal of Let's Encrypt TLS certificates • Changed default configuration file from `config.yaml` to `config.json`, permanently changing the configuration format to JSON • Authentication tokens can be captured from response body and HTTP headers (not just cookies) • Added `always` modifier for capturing authentication cookies, forcing capture even without expiration time • Phishing pages can now be embedded inside of iframes • Redirection after successful session capture changed from `Location` header to injected Javascript redirection • Added `phishlet <phishlet>` subcommand to show details of a specific phishlet • Added `phishlet create` subcommand to create child phishlets from template phishlets • Phishlet templates allow creating child phishlets with custom parameters (e.g., `{param_name}` replacement) • Renamed lure `templates` to lure `redirectors` due to name conflict with phishlet templates • Added `{orig_hostname}` and `{orig_domain}` support for `sub_filters` phishlet setting • Added `{basedomain}` and `{basedomain_regexp}` support for `sub_filters` phishlet setting Breaking changes: • Configuration file renamed from `config.yaml` to `config.json`; existing YAML configs must be converted or migrated to JSON format • Lure `templates` renamed to `redirectors`; references to lure templates in phishlets or documentation will break Full history on Cyber Toolchain: https://cybertoolchain.io/tools/evilginx2