@evilginx

I am the evil bot capturing your MFA tokens. Offensive security reverse-proxy phishing framework capable of bypassing MFA protections, created by @mrgretzky

github.com/kgretzky/evilginx2
Joined May 2018
  • Tweets36
  • Following1
  • Followers828
3Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Replying to @jsark983
🍪👀
1
44
Black Friday and Cyber Monday deals are out! I review some of them and link to a community GitHub page for you all to get discounts on courses, tools and services! Deals from @_RastaMouse, @_JohnHammond, @offsectraining, @evilginx, @Antisy_Training and a whole lot more. youtu.be/hkJfhM1T5bI

Get the latest Black Friday and Cyber Monday Cybersecurity Deals for...

Get the latest Black Friday and Cyber Monday Cybersecurity Deals fo...

youtube.com
1
4
10
5,188
🚨 "Working With Evilginx On-Premises" For projects where OPSEC is critical: keep sensitive data on your server, use cloud only for redirectors. Architecture: Cloudflare → Caddy → Evilginx (on-prem via Tailnet) dan1t0.com/2025/09/24/Workin… @evilginx @mrgretzky #Phishing #OPSEC
18
2
56
14,314
The official MFA phishing anthem! 🍪💗🎵
UwU Underground
@uwu_underground21 May 2025
🎵🎧 .lıllılı.ıllı.ılılıılıı.lllııılı. UwU Underground Now Playing: [I Stole Your MFA] 0:44 ———♡———1:52 ◁◁ ▐ ▌ ▷▷ Get Psyopped By New Music, Mammals
2
6
1,816
Replying to @uwu_underground
💗🍪💗
1
37
🚨 The Black Friday sale is coming! The sale drops at midnight today! (UTC+1) It will be the biggest sale yet! 🤩
1
9
50
4,860
Evilginx retweeted
Tarek@Cyber_Tarek17 Apr 2024
Black hat Asia training is completed. Two days of sharing with our students how APTs compromise AD and Entra ID. And I couldn't help but give a quick shout-out to @evilginx Next stop is @x33fcon & I'm looking forward to it!
1
2
7
1,770
Replying to @Cyber_Tarek @x33fcon
I'm mindblown! 🤯 Thank you, Tarek! Will have a chance to give you a high five in person at @x33fcon 😀👍
2
118
Merry Christmas everyone! ❄️☃️🎄 Wish you all the best and thank you for a great year! ✨️
vx-underground
@vxunderground15 Dec 2023
Our friend @mrgretzky hooked us up with 12 Evilginx Mastery courses - making it the 12 days of Evilginx Xmas:) Course details: academy.breakdev.org/evilgin… Comment below for a chance to win.
3
5
95
13,761
🚨 BLACK FRIDAY Evilginx Mastery -40% SALE 🚨 👑 40% discount (biggest yet!) ⏰ Only 24 hours Code: BLACKFRIDAY40SALE Link: academy.breakdev.org/evilgin… Hurry! It's active only until tomorrow!
11
48
7
100
60,334
🚨 Evilginx Mastery Black Friday SALE is coming... tomorrow! 🔥 It will be the BIGGEST sale so far! 🤩 ⏰ Sale will last only 24 hours.
4
16
91
33,447
The @evilginx Mastery course is way too much fun 👀
1
2
12
1,524
Replying to @SwiftOnSecurity @mrgretzky
🔥🔥🔥
3
475
The purpose of SMS/Push/# matching MFA was to put you past most victims and thus most toolsets. There was a point you were basically immune with legacy protocols turned off in Exchange. Now that stronger methods are normalized, attackers are targeting their weaknesses. Not done.
John Hammond
@_JohnHammond1 Nov 2023
Session hijacking a Microsoft 365 account! Stealing their credentials and bypassing MFA prompt with Evilginx: a reverse-proxy phishing framework! We stage a phishing domain and email pretense, and gain full access to the victim account! youtu.be/sZ22YulJwao
9
60
3
429
128,096
Replying to @mwaski88
Round 2 is closed now. Round 3 will open after launch, but you can also reach out privately.
1
191
I approve this message! 🪝🐟
John Hammond
@_JohnHammond1 Nov 2023
Session hijacking a Microsoft 365 account! Stealing their credentials and bypassing MFA prompt with Evilginx: a reverse-proxy phishing framework! We stage a phishing domain and email pretense, and gain full access to the victim account! youtu.be/sZ22YulJwao
8
4,648
Session hijacking a Microsoft 365 account! Stealing their credentials and bypassing MFA prompt with Evilginx: a reverse-proxy phishing framework! We stage a phishing domain and email pretense, and gain full access to the victim account! youtu.be/sZ22YulJwao
26
292
25
1,571
417,012
🚨 The big reveal of Evilginx Pro is finally OUT! 🚨 📔From this blog post you will learn what makes the Pro version different from the community one. 🎟️I explain how Evilpuppet secret token extraction works and showcase the core features. Enjoy! 🪝🐟 breakdev.org/evilginx-pro-re…

Evilginx Pro - The Future of Phishing

I've teased the idea of Evilginx Pro long enough and I think it is finally time to make a proper reveal of what it exactly is. Evilginx Pro will be a paid professional version of Evilginx, with extra...

breakdev.org
10
72
2
205
26,003
🎬Phishing LinkedIn and bypassing MFA demo created for the upcoming Evilginx Pro post 🔥 💡Evilginx uses a background browser to capture the secret token from legitimate website and inject it back into the reverse proxy phishing session. P.S. Enjoy that Cyberpunk tune I made 🎵
8
114
7
446
75,600
Patch to add custom DNS records in running instance of Evilginx made by @ojensen5115 🔥 This is getting added for good in upcoming updates.
This quoted post is unavailable.
Try viewing anyway · View on X
3
19
4,489
Load more