discovered 03 Aug 2026
evilginx2
→ View on GitHubEvilginx is a sophisticated man-in-the-middle attack framework designed for phishing login credentials and session cookies, effectively bypassing two-factor authentication. The tool is fully implemented in Go, featuring its own HTTP and DNS server, enabling straightforward setup and deployment; it includes advanced functionalities such as phishing detection evasion, bot traffic prevention, and comprehensive support for multi-domain DNS providers.