> For the complete documentation index, see [llms.txt](https://dmcxblue.gitbook.io/red-team-notes-2-0/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dmcxblue.gitbook.io/red-team-notes-2-0/red-team-infrastructure/delivery/evilginx.md).

# EvilGinx

Evilginx2 is a man-in-the-middle attack framework used for phishing login credentials along with session cookies which in turn allows bypassing 2-factor authentication protection

Now I won't go into a detailed explanation on setting this up as there are plenty of sources even on its Github page and I can probably be using a different VPS provider that won't match these steps, but the basic configuration is:

Will choose our phishlets I chose LinkedIn

![](/files/eHXSkhD8pzAsn1eDgoP7)

Configure the domain and IP and enable the phishlet

![](/files/ByKdGnLpyIzfOGyWWFCW)

Once set evilginx2 will create an SSL certificate utilizing Let's Encrypt if this is unsuccessful you can do this manually but from here, we can create the lures and grab the URLs needed to send to the target

![](/files/fd26oD3TCWxUifbUIriA)

When the user logs in we will capture cleartext credentials and the Cookie needed to bypass MFA Authentication

![](/files/NG8z2IU5QeVJ9AZ8JRQe)

If MFA is enabled and the user logged in successfully, we will receive the Cookie as well, since this demo those not contain a legitimate user, the cookie is not demonstrated but the cleartext attempt is logged.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://dmcxblue.gitbook.io/red-team-notes-2-0/red-team-infrastructure/delivery/evilginx.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.