Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

🚨 Evilginx Pro is launching TOMORROW, February 25th! Evilginx Pro will provide access to the official phishlets database from day one. 🪝🐟 Currently supported: - Google - MS365 Business - Outlook Mail - Okta Demo below on how to access phishlets.

Kuba Gretzky

17,328 subscribers

23,594 views • 1 year ago •via X (Twitter)

Science & Technology

Anya Rossi• Live Now

Private livecam show

3 Comments

nOc3rT1 year ago

How does one join as an individual pentester

Elite Trader Funding2 years ago

Trade futures on YOUR terms. Whether you're a day trader or overnight holder, we've got you covered. Get the tools, support & capital to succeed with Elite Trader Funding.

mr.d0x1 year ago

🔥🔥🔥

Related Videos

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:

Kuba Gretzky

43,932 views • 2 years ago

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

Kuba Gretzky

34,973 views • 3 months ago

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Kuba Gretzky

25,925 views • 2 months ago

I've just updated the M365 2.0 phishlet for Evilginx Pro with full Browser-in-the-Browser compatibility. 🪝🐟 To remove frame-busting code from any website (allowing it to be iframed): - Remove the "Content-Security-Policy" and "X-Frame-Options" HTTP headers. - Find and remove JavaScript that references "top.location" or "self !== top". - Remove "target='_top'" from HTML forms. Let me know if you'd like me to make a hands-on tutorial showing how to identify and remove frame-busting code from the MS sign-in page using Chrome DevTools and Burp Suite.

I've just updated the M365 2.0 phishlet for Evilginx Pro with full Browser-in-the-Browser compatibility. 🪝🐟 To remove frame-busting code from any website (allowing it to be iframed): - Remove the "Content-Security-Policy" and "X-Frame-Options" HTTP headers. - Find and remove JavaScript that references "top.location" or "self !== top". - Remove "target='_top'" from HTML forms. Let me know if you'd like me to make a hands-on tutorial showing how to identify and remove frame-busting code from the MS sign-in page using Chrome DevTools and Burp Suite.

Kuba Gretzky

11,955 views • 2 months ago

On Runway Dev, get access to the world’s best media models on one enterprise-grade platform. Seed Audio 1.0, Seedance Mini, Seedance 4K, Google Omni Flash, Seedream 5.0 Pro and more now available. Get started at the link below.

On Runway Dev, get access to the world’s best media models on one enterprise-grade platform. Seed Audio 1.0, Seedance Mini, Seedance 4K, Google Omni Flash, Seedream 5.0 Pro and more now available. Get started at the link below.

Runway

64,479 views • 3 months ago

No more waitlist. The GitHub Copilot app's technical preview is now available to everyone currently on Copilot Pro, Pro+, Max, Business, and Enterprise plans. This agent-native desktop experience lets you decide what agents work on, how they work, and what ships. Go from issue to merge all in one place. ✨

No more waitlist. The GitHub Copilot app's technical preview is now available to everyone currently on Copilot Pro, Pro+, Max, Business, and Enterprise plans. This agent-native desktop experience lets you decide what agents work on, how they work, and what ships. Go from issue to merge all in one place. ✨

GitHub

148,308 views • 3 months ago

🔥 💻 🎥 How to provide o1 Pro with your FULL CODEBASE through the ChatGPT Cursor connection yesterday I recorded a video connecting o1 Pro to Cursor through the ChatGPT Desktop app more than one person commented on how limiting it is for o1 Pro to only have access to a single open file in Cursor here's a walkthrough of how you can provide o1 Pro with your FULL CODEBASE as context instead of just a single file: 1. Write a Python function that concatenates full codebase into a single snapshot in a .txt file (link in comment) 2. Open that "codebase_snapshot.txt" in a separate Cursor pane 3. Go to the ChatGPT app and ask it what context it has access to through Cursor - should say it has two files with one of them being the codebase snapshot and boom there ya go. o1 Pro has access to everything in your codebase full walkthrough here 👇

🔥 💻 🎥 How to provide o1 Pro with your FULL CODEBASE through the ChatGPT Cursor connection yesterday I recorded a video connecting o1 Pro to Cursor through the ChatGPT Desktop app more than one person commented on how limiting it is for o1 Pro to only have access to a single open file in Cursor here's a walkthrough of how you can provide o1 Pro with your FULL CODEBASE as context instead of just a single file: 1. Write a Python function that concatenates full codebase into a single snapshot in a .txt file (link in comment) 2. Open that "codebase_snapshot.txt" in a separate Cursor pane 3. Go to the ChatGPT app and ask it what context it has access to through Cursor - should say it has two files with one of them being the codebase snapshot and boom there ya go. o1 Pro has access to everything in your codebase full walkthrough here 👇

Dan McAteer

99,787 views • 1 year ago

[🚨 EDGEN PRO SUBSCRIPTIONS - NOW LIVE!] trading on Earth is good. trading high above with Edgen Pro & Expert? way cooler. unlock exclusive features to boost your trading power 🚀 PLUS: Access to new AURA sources ✨ Only one direction from here: UP 🔼 🧵👇

[🚨 EDGEN PRO SUBSCRIPTIONS - NOW LIVE!] trading on Earth is good. trading high above with Edgen Pro & Expert? way cooler. unlock exclusive features to boost your trading power 🚀 PLUS: Access to new AURA sources ✨ Only one direction from here: UP 🔼 🧵👇

Edgen

202,884 views • 1 year ago

The wait is over. Google Gemini is now shipping Veo 3 *globally* for all Pro members! That means India, Indonesia, all of Europe, and more are starting to get access to create videos right now. As a member, you'll get 3 video generations per day, and that credit will replenish daily. How to get it 👇

The wait is over. Google Gemini is now shipping Veo 3 globally for all Pro members! That means India, Indonesia, all of Europe, and more are starting to get access to create videos right now. As a member, you'll get 3 video generations per day, and that credit will replenish daily. How to get it 👇

Josh Woodward

465,240 views • 1 year ago

LAST CHANCE! 🚨 Grab a Pub Tour CD from the link below by Wednesday 31st January at 11am to access the exclusive pub tour tickets, which go on sale at 11am on February 1st! 👊 💿: You don’t want to miss out on this one! 👀

LAST CHANCE! 🚨 Grab a Pub Tour CD from the link below by Wednesday 31st January at 11am to access the exclusive pub tour tickets, which go on sale at 11am on February 1st! 👊 💿: You don’t want to miss out on this one! 👀

Jamie Webster

21,327 views • 2 years ago

Gemini 3 Pro in Search can help you understand complex topics, with dynamic visual layouts with interactive tools and simulations — all generated on the fly. And last week we expanded access to Gemini 3 Pro in Search in AI Mode for everyone in the U.S. Hear more from the team about how it works ↓

Gemini 3 Pro in Search can help you understand complex topics, with dynamic visual layouts with interactive tools and simulations — all generated on the fly. And last week we expanded access to Gemini 3 Pro in Search in AI Mode for everyone in the U.S. Hear more from the team about how it works ↓

Google

63,638 views • 9 months ago

Matthew Prince reveals Cloudflare will block Google by default starting mid-September for ad- and subscription-supported sites, and expects the largest publishers to follow "What we've said at Cloudflare is that by mid-September we're going to treat Google the same way. If you're a business that's ad-supported or subscription-supported, then we're going to restrict Google from being able to access your content." "You can always opt out. If you're like, "No, I love Google, they've always been good to me, they can have access to my content for free," go ahead, that's fine." "But the defaults for us starting in mid-September are going to be that we are going to block Google by default." "And I would imagine that a bunch of the largest publishers in the world are going to follow suit."

Matthew Prince reveals Cloudflare will block Google by default starting mid-September for ad- and subscription-supported sites, and expects the largest publishers to follow "What we've said at Cloudflare is that by mid-September we're going to treat Google the same way. If you're a business that's ad-supported or subscription-supported, then we're going to restrict Google from being able to access your content." "You can always opt out. If you're like, "No, I love Google, they've always been good to me, they can have access to my content for free," go ahead, that's fine." "But the defaults for us starting in mid-September are going to be that we are going to block Google by default." "And I would imagine that a bunch of the largest publishers in the world are going to follow suit."

Fireside Alpha

86,858 views • 1 month ago

This is how to get WL on the next agents(dot)land launch happening TOMORROW. Previous launches are both over 400x up from their “party” (wl) round. ps. I also explain the public round. Get access to all the links on this video on my channel below 👇🏽

This is how to get WL on the next agents(dot)land launch happening TOMORROW. Previous launches are both over 400x up from their “party” (wl) round. ps. I also explain the public round. Get access to all the links on this video on my channel below 👇🏽

Gigi 🇻🇪

63,812 views • 1 year ago

Hi everyone! The day has finally arrived. "Gunman Contracts - Stand Alone" is Out Now on Steam Early Access, playable in VR and NonVR. And to celebrate, here is the wonderful launch trailer from DEMO AKURO one more time in full. Enjoy! Steam:

Hi everyone! The day has finally arrived. "Gunman Contracts - Stand Alone" is Out Now on Steam Early Access, playable in VR and NonVR. And to celebrate, here is the wonderful launch trailer from DEMO AKURO one more time in full. Enjoy! Steam:

ANB_Seth

42,699 views • 27 days ago

We’re nearing the launch of the Dot mobile app. This is an important expansion of the platform, bringing the same private inference infrastructure and model access currently available directly to mobile. The app will provide access to the core Dot ecosystem from a single mobile interface, including DotChat, model selection, image generation, video generation and other important platform capabilities. Mobile also gives us a significantly larger distribution surface and a more practical way for users to access Dot throughout the day. This means more accessibility, more usage and another major channel for inference demand. The same Dot platform, coming to your App Store/Google Play soon.

We’re nearing the launch of the Dot mobile app. This is an important expansion of the platform, bringing the same private inference infrastructure and model access currently available directly to mobile. The app will provide access to the core Dot ecosystem from a single mobile interface, including DotChat, model selection, image generation, video generation and other important platform capabilities. Mobile also gives us a significantly larger distribution surface and a more practical way for users to access Dot throughout the day. This means more accessibility, more usage and another major channel for inference demand. The same Dot platform, coming to your App Store/Google Play soon.

Dot

13,585 views • 27 days ago

Avail Nexus X Monad Testnet is LIVE ✨ We’re excited to announce support for Monad with the Monad FastBridge. Users can bridge aggregated balances from 10+ ecosystems to Monad in one click. This means: - Apps on Monad can go multi-chain from day one - Seamless liquidity & user onboarding - Simple, fast, unified onchain access Launching on Monad mainnet from day 1.

Avail Nexus X Monad Testnet is LIVE ✨ We’re excited to announce support for Monad with the Monad FastBridge. Users can bridge aggregated balances from 10+ ecosystems to Monad in one click. This means: - Apps on Monad can go multi-chain from day one - Seamless liquidity & user onboarding - Simple, fast, unified onchain access Launching on Monad mainnet from day 1.

Avail

15,246 views • 11 months ago

$VANTIS is now available on Robinhood Crypto via Virtuals Protocol. Official CA: 0xB6d695d5fbcEbD837f6b9f214c9BeeE8bA90762B Vantis is an on-chain AI software factory—one pipeline from our own GPU compute to shipped software. We build consumer and enterprise products across perception, generative, agentic, and robotics AI. Stake $VANTIS to unlock the software factory: Pro access to every product: Pabrik, Vault, Kreofi, Trillion, and many more with unlimited inference. Own the factory.

$VANTIS is now available on Robinhood Crypto via Virtuals Protocol. Official CA: 0xB6d695d5fbcEbD837f6b9f214c9BeeE8bA90762B Vantis is an on-chain AI software factory—one pipeline from our own GPU compute to shipped software. We build consumer and enterprise products across perception, generative, agentic, and robotics AI. Stake $VANTIS to unlock the software factory: Pro access to every product: Pabrik, Vault, Kreofi, Trillion, and many more with unlimited inference. Own the factory.

Vantis

72,342 views • 2 months ago

✨ Here is how Debby Aseli get #GreaterHealthEveryday on her 10k marathon with #GalaxyWatch5Pro! ✨ Watch the full video, and reply below with one feature from Galaxy Watch5 Pro that you love the most! Join her to #TurnOnTheBestYou 🔥

✨ Here is how Debby Aseli get #GreaterHealthEveryday on her 10k marathon with #GalaxyWatch5Pro! ✨ Watch the full video, and reply below with one feature from Galaxy Watch5 Pro that you love the most! Join her to #TurnOnTheBestYou 🔥

Samsung Indonesia

11,150 views • 3 years ago