Download
Evilginx v.1.1.0 is the original version of a man-in-the-middle phishing research framework created to demonstrate risks in web authentication systems. It used a customized Nginx configuration to proxy traffic between a browser and a legitimate web service. The framework was designed to study how credentials and authenticated session cookies could be intercepted during authorized security assessments. Site-specific templates defined how supported services were proxied and modified. A Python management script handled configuration, log processing, and supporting workflow tasks. The repository is obsolete and has been superseded by Evilginx2, which replaced its Nginx-based architecture with a standalone Go implementation. Because its capabilities can facilitate credential theft, legitimate use is limited to defensive research and explicitly authorized testing.
Features
- Nginx-based reverse-proxy architecture
- Credential and session-cookie interception research
- Site-specific service templates
- Python-based management tooling
- Security assessment log processing
- Superseded by the newer Evilginx2 project
Project Samples
