Social Engineering

Evilginx2

MITM phishing framework for testing MFA bypass resilience (authorized only).

advanced

Linux

Exploitation

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

High legal risk if misused — authorized red team only.

Advanced red team phishing simulations with strict RoE.

Configure domain/phishlets; capture session tokens in controlled tests.

Teaches why phishing-resistant MFA (FIDO2) matters.

Commands & usage

evilginx

phishlets

lures create

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

Gophish

Open-source phishing framework for awareness campaigns.

Social-Engineer Toolkit (SET)

Framework for social engineering labs (credential harvesters, payloads).