evilginx2: Advanced Phishing with 2FA Bypass Framework
This repository profile is provided by osrepos.com, an open source repository discovery platform.
Summary
evilginx2 is a powerful man-in-the-middle attack framework designed for advanced phishing campaigns. It effectively captures login credentials and session cookies, enabling the bypass of two-factor authentication. Written in Go, this standalone application integrates its own HTTP and DNS server for easy setup and use.
Repository Information
Topics
Click on any tag to explore related repositories
Use at your own risk
OSRepos shares public repositories for knowledge and discovery only. Any installation, execution, configuration, or use of code from these repositories is the user's own responsibility. Always review the repository, source code, dependencies, licenses, and security implications before running or installing anything. OSRepos is not responsible for issues, damages, or losses resulting from third-party repositories.
Introduction
evilginx2 is a sophisticated man-in-the-middle (MitM) attack framework designed for advanced phishing campaigns. It specializes in capturing login credentials and session cookies, effectively bypassing two-factor authentication (2FA) mechanisms. As the successor to the original Evilginx, this version is entirely written in Go, operating as a standalone application with its own integrated HTTP and DNS server, making it remarkably easy to deploy and use.
The framework is a powerful tool for demonstrating what adept attackers can achieve. It is crucial to note that evilginx2 should only be used in legitimate penetration testing assignments with explicit written permission from all involved parties.
Installation
To get started with evilginx2, please refer to the comprehensive official documentation for detailed installation instructions and setup guides. The documentation covers everything from initial setup to configuring phishlets and launching your first campaign.
Examples
evilginx2 operates by setting up a reverse proxy that intercepts traffic between a victim and a legitimate website. It utilizes "phishlets" to define how to proxy specific websites, allowing it to capture credentials and session cookies in real-time. This capability enables security professionals to demonstrate how attackers can bypass multi-factor authentication by replaying the captured session.
For those looking to integrate evilginx2 with other tools, an official Gophish integration is available. This allows for streamlined phishing email campaigns that are compatible with evilginx2's advanced capabilities.
Why Use
evilginx2 is an indispensable tool for security professionals engaged in penetration testing and red team operations. Its unparalleled ability to bypass 2FA makes it highly effective in simulating real-world, sophisticated phishing attack vectors. The framework's standalone nature, written in Go, ensures simplified deployment and offers a robust, easy-to-use solution for demonstrating and understanding advanced phishing scenarios. It serves as a vital resource for defenders to comprehend and mitigate such threats.
Links
- GitHub Repository: kgretzky/evilginx2
- Official Documentation: help.evilginx.com
- Evilginx Pro: evilginx.com (Commercial version with advanced features)
- Evilginx Mastery Training Course: academy.breakdev.org/evilginx-mastery
- Gophish with Evilginx integration: kgretzky/gophish
- Evilginx 3.0 Release Blog Post: breakdev.org/evilginx-3-0-evilginx-mastery/
Related repositories
Similar repositories that may be relevant next.

uta: A CLI Agent Orchestrator for Parallel AI Task Management
September 19, 2026
uta is a command-line interface (CLI) agent orchestrator designed to decompose complex goals into parallel subtasks. It can dispatch these tasks to various agent CLIs like Claude Code or Gemini CLI, record every step of the process, and synthesize the final results. This tool enhances agent capabilities by enabling parallelism and cross-provider task execution.

Open Code Review: AI-Powered Code Review Tool from Alibaba
September 18, 2026
Open Code Review is an AI-powered command-line interface tool for code review, battle-tested at Alibaba's scale. It leverages a hybrid architecture, combining deterministic engineering with an LLM agent, to provide secure, fast, and efficient code analysis. This tool generates precise, line-level comments and supports a multi-language ruleset, ensuring high-quality code reviews.

n8n-sandbox-service: Isolated Execution Environments for Your Applications
September 17, 2026
The n8n-sandbox-service provides isolated, on-demand execution environments, leveraging containers or Firecracker microVMs. It offers a REST API to run commands and handle files within these secure sandboxes, ideal for applications requiring ephemeral execution contexts.

Declarative Agents: Profile-Driven LLM Agent Runtime in Go
September 13, 2026
Declarative Agents by Nokia Bell Labs offers a profile-driven runtime and design patterns for building tool-augmented LLM agents. It allows defining agents, their tools, states, and transitions via YAML profiles, eliminating the need for code changes for workflow alterations. This Go-based framework promotes flexible and dependable agent development.
Source repository
Open the original repository on GitHub.
17 counted GitHub visits