EvilGinx 2.2.0 – New Features & Fixes
- Added option to capture custom POST arguments additionally to credentials. Check
custom
field undercredentials
. - Added feature to inject custom POST arguments to requests. Useful for silently enabling “Remember Me” options, during authentication.
- Restructured phishlet YAML config file to be easier to understand (phishlets from previous versions need to be updated to new format).
- Removed
name
field from phishlets. Phishlet name is now determined solely based on the filename. - Now when any of
auth_urls
is triggered, the redirection will take place AFTER response cookies for that request are captured. - Regular expression groups working with
sub_filters
. - Phishlets are now listed in a table.
- Phishlet fields are now selectively lowercased and validated upon loading to prevent surprises.
- All search fields in the phishlet are now regular expressions by default. Remember about proper escaping!