Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection.
This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server to provide man-in-the-middle functionality to act as a proxy between a browser and phished website. Present version is fully written in GO as a standalone application, which implements its own HTTP and DNS server, making it extremely easy to set up and use.
Description and README excerpt from kgretzky/evilginx2 on GitHub ↗.
kgretzky/evilginx2 was first seen on GitHub · Trending Go today on Nov 8, 2026. Since then it has appeared in 2 checks on 1 different day. Its best position was #7 of 18, reached on Nov 8, 13:58 UTC. It is #7 right now.
Position on GitHub · Trending Go today at every check (lower is better).
Best rank per day (UTC).
today as reported by GitHub.
Archived daily, weekly and monthly lists that include this entry.
Yes. As of Nov 8, 16:58 UTC it is #7.
#7 on GitHub · Trending Go today, on Nov 8, 13:58 UTC. Trendoday checks this list every 180 minutes.
It was first seen on Nov 8, 2026 and has been on the list on 1 day (2 checks) since.
Mostly Go; it is licensed under BSD-3-Clause. It has 15.9k stars and 2764 forks.