Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

Bypassing Google AiTM Protections using Evilginx (Modified Public Version). This demo uses functionality similar to evilpuppet which is only available in evilginx pro version (not yet released).

Udayveer Singh

2,073 subscribers

15,063 views • 2 years ago •via X (Twitter)

Science & Technology News & Politics

Anya Rossi• Live Now

Private livecam show

6 Comments

无限火力2 years ago

Can I log in using different exit IPs?

Udayveer Singh2 years ago

Yaa thats possible if you uses rotating proxies and configure it with evilginx.

Viduka2 years ago

Big Up @m4lici0u5

Forrest Kasler2 years ago

Where's the code?

Udayveer Singh2 years ago

Its in evilginx private phishlets repo and its only accessible to contributors. One way to get there is to get into breakdev red on discord.

Smith Scott2 years ago

Hello, How do get the phishlet?

Related Videos

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:

Kuba Gretzky

43,932 views • 2 years ago

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Kuba Gretzky

25,705 views • 1 month ago

Yes, this is what you get in my Membership. "ANATHEMA" a new lore-centric Original Song made by me has just been released! Short version is available to the public 🔻🔻🔻 🔗: Full version of this song + the 31 minute companion Voice Pack is available in my Tier 4 Membership!

Yes, this is what you get in my Membership. "ANATHEMA" a new lore-centric Original Song made by me has just been released! Short version is available to the public 🔻🔻🔻 🔗: Full version of this song + the 31 minute companion Voice Pack is available in my Tier 4 Membership!

Octavio ထ HOLOSTARS EN

73,604 views • 16 days ago

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

Kuba Gretzky

34,800 views • 2 months ago

Experimental TasteSkill v2 is out! This version is very good for Opus/models in cursor. It uses image gen when available. Full more complex version is 100% coming next week. guide on how to use this skill ⤵️

Experimental TasteSkill v2 is out! This version is very good for Opus/models in cursor. It uses image gen when available. Full more complex version is 100% coming next week. guide on how to use this skill ⤵️

Leon Lin

34,322 views • 3 months ago

The Special Unit Lucky Draw is coming soon to the Global version and other versions where it has not yet been released It was previously available only in the CN version Contain: 🟡Legendary Asm10 - Martial Prime 🟣 Epic Tempest - Zero Low #CODMobile #callofdutymobile #codm #codmnews #codmleaks Follow Us & Join our Discord server for the latest news and leaks.

The Special Unit Lucky Draw is coming soon to the Global version and other versions where it has not yet been released It was previously available only in the CN version Contain: 🟡Legendary Asm10 - Martial Prime 🟣 Epic Tempest - Zero Low #CODMobile #callofdutymobile #codm #codmnews #codmleaks Follow Us & Join our Discord server for the latest news and leaks.

Leakers On Duty

42,318 views • 8 months ago

I hope VRChat is ready to have a web browser :) Very cool to see Hyperbeam working in game! DISCLAIMER: Very early dev version not available to public.

I hope VRChat is ready to have a web browser :) Very cool to see Hyperbeam working in game! DISCLAIMER: Very early dev version not available to public.

Hyperbeam Watch Party

196,551 views • 2 years ago

The first dubbed version of the 'FIVE NIGHTS AT FREDDY'S' Movie Teaser Trailer has been released, translating the spoken dialogue into Italian! The trailer is rated MiC 6+ for violence (which is roughly equivalent to a PG rating). However, keep in mind this rating is ONLY for the trailer and does not reflect the finished version of the film. #fnaf #fivenightsatfreddys #fnafmovie

The first dubbed version of the 'FIVE NIGHTS AT FREDDY'S' Movie Teaser Trailer has been released, translating the spoken dialogue into Italian! The trailer is rated MiC 6+ for violence (which is roughly equivalent to a PG rating). However, keep in mind this rating is ONLY for the trailer and does not reflect the finished version of the film. #fnaf #fivenightsatfreddys #fnafmovie

JonnyBlox

60,838 views • 3 years ago

Alone in the Deathless Quiet: Name Day | Reverse: 1999 Look at this knife. It's so shiny yet not even a little sharp. 3rd Anniversary Version — Version 3.7 On Another's Sorrow is now available on Mobile and PC. #Reverse1999Ver3ꓸ7 #Reverse1999Anniversary #NameDay

Alone in the Deathless Quiet: Name Day | Reverse: 1999 Look at this knife. It's so shiny yet not even a little sharp. 3rd Anniversary Version — Version 3.7 On Another's Sorrow is now available on Mobile and PC. #Reverse1999Ver3ꓸ7 #Reverse1999Anniversary #NameDay

Reverse: 1999 | 3rd Anniv Ver. Available Now

20,832 views • 25 days ago

I was so impressed with the Astra demo at Google I/O yesterday that I decided to build my own version using Gemini 1.5 Pro Flash. It's so fast and really good. ⚡️ It was even able to detect the gate! Content is streamed directly from my camera. Voice via

I was so impressed with the Astra demo at Google I/O yesterday that I decided to build my own version using Gemini 1.5 Pro Flash. It's so fast and really good. ⚡️ It was even able to detect the gate! Content is streamed directly from my camera. Voice via

Pietro Schirano

107,742 views • 2 years ago

CYTM (cry to your mother) full demo version is now available on iwant youtube channel they change lyrics ‘kabebehan’ to ‘kalokohan’ i can't wait bini sing this song, in all out to this 👏🏼

CYTM (cry to your mother) full demo version is now available on iwant youtube channel they change lyrics ‘kabebehan’ to ‘kalokohan’ i can't wait bini sing this song, in all out to this 👏🏼

𝗥 𝗔 𝗟 𝗣 𝗛 | binisonic 🌅🌺

26,693 views • 3 months ago

A soda-cans scroll animation using three.js with scroll animation. Completely built with Codex GPT 5.6 Sol Ultra in ~20mins. The textures are being generated by imagegen skill. Not polished version. This is crazy af Demo: Source:

A soda-cans scroll animation using three.js with scroll animation. Completely built with Codex GPT 5.6 Sol Ultra in ~20mins. The textures are being generated by imagegen skill. Not polished version. This is crazy af Demo: Source:

fatih kadir akın

12,988 views • 1 month ago

For CARATs who have not yet heard this special ballad version of Don’t Wanna Cry that was performed only in Japan— Here is an incredible showcase that demonstrates how SEVENTEEN is not only a performance powerhouse, but also undeniably a vocal powerhouse. Thread below:

Sensitive content

For CARATs who have not yet heard this special ballad version of Don’t Wanna Cry that was performed only in Japan— Here is an incredible showcase that demonstrates how SEVENTEEN is not only a performance powerhouse, but also undeniably a vocal powerhouse. Thread below:

Kathrina

159,835 views • 2 years ago

MTMB ARC Animated title screen proposal. This is not an ingame version but it's rendered in AfterEffects. The final will look similar but with a smaller aspect ratio to meet RMXP's requirements. Might end up using this title screen for initial boot. Music by Julie | JerryStuffRo | COMMS OPEN

MTMB ARC Animated title screen proposal. This is not an ingame version but it's rendered in AfterEffects. The final will look similar but with a smaller aspect ratio to meet RMXP's requirements. Might end up using this title screen for initial boot. Music by Julie | JerryStuffRo | COMMS OPEN

CorpseSyndrome

32,539 views • 3 years ago

The latest version of Pro is now available on VCC. This was done to make updating Pro as easy as toon, but you can still download the standalone package if you'd like. (more details in comments)

The latest version of Pro is now available on VCC. This was done to make updating Pro as easy as toon, but you can still download the standalone package if you'd like. (more details in comments)

poiyomi

25,344 views • 7 months ago

Google just launched Gemini 3.5 Transcribe, its most precise speech-to-text model yet. I built this app using Gemini 3.5 Transcribe and have been playing with the model for quite some time. Thanks to the Google DeepMind team for the early access. It’s already available in the Gemini API, AI Studio, and Antigravity, and is now in public preview.

Google just launched Gemini 3.5 Transcribe, its most precise speech-to-text model yet. I built this app using Gemini 3.5 Transcribe and have been playing with the model for quite some time. Thanks to the Google DeepMind team for the early access. It’s already available in the Gemini API, AI Studio, and Antigravity, and is now in public preview.

AshutoshShrivastava

20,167 views • 17 days ago

Early version of the CGS trailer dated April 18th 2024. This first draft consisted of placeholder footage to form the skeleton of what the final version would look like. Also included is an early retake of "Bittersweet", which was altered significantly in the released trailer.

Early version of the CGS trailer dated April 18th 2024. This first draft consisted of placeholder footage to form the skeleton of what the final version would look like. Also included is an early retake of "Bittersweet", which was altered significantly in the released trailer.

Sonic Legends - Community Fan Project

11,158 views • 1 year ago