S9003 evilginx2

toolEnterprise

platformsIaaS · Identity Provider · Office Suite · SaaS

also known asevilginx2

evilginx2 is an open-source adversary-in-the-middle (AiTM) attack framework based on the open-source nginx web server. evilginx2 can be used as a reverse proxy between victims and legitimate web services to intercept and capture credentials, authentication tokens, and session cookies.

01

techniques used (14)

ATT&CK techniques this enables or maps to.

02

source

Where this definition is published.

view on ATT&CK
scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan