Loading video...

Video Failed to Load

Go Home

๐Ÿšจ Evilginx Pro is launching TOMORROW, February 25th! Evilginx Pro will provide access to the official phishlets database from day one. ๐Ÿช๐ŸŸ Currently supported: - Google - MS365 Business - Outlook Mail - Okta Demo below on how to access phishlets.

23,560 views โ€ข 1 year ago โ€ขvia X (Twitter)

3 Comments

nOc3rT's profile picture
nOc3rT1 year ago

How does one join as an individual pentester

Elite Trader Funding's profile picture
Elite Trader Funding1 year ago

Trade futures on YOUR terms. Whether you're a day trader or overnight holder, we've got you covered. Get the tools, support & capital to succeed with Elite Trader Funding.

mr.d0x's profile picture
mr.d0x1 year ago

๐Ÿ”ฅ๐Ÿ”ฅ๐Ÿ”ฅ

Related Videos

Is reverse proxy phishing slowly dying? ๐Ÿ’€๐ŸŽฃ This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! ๐Ÿ’— Happy phishing! ๐Ÿช๐ŸŸ Kuba

Kuba Gretzky

24,829 views โ€ข 12 days ago

Gemini for Android is here! This new app makes it easier to access Google's chatbot, powered by the Gemini Pro LLM, right from your Android device. You can ask Gemini a question by tapping the launcher icon or long-pressing the power button. Once invoked, the Gemini overlay lets you enter a text or text+image prompt. You can tap the camera icon to snap a photo or press the "add this screen" button to take a screenshot of the current page to include in your prompt. The Gemini app for Android is available on Google Play with support for English, but support for Korean and Japanese will be coming next week. While there won't be an app for iOS, iPhone users can access Gemini by opening the Google App and tapping the "Gemini" button up top. How can you long-press the power button to invoke Gemini if that gesture is handled by Google Assistant? The answer is that the Gemini Android app can replace Google Assistant as your default assistant if you want, meaning all the ways you'd normally invoke Google Assistant on your phone can instead invoke Gemini. Unfortunately, Gemini currently doesn't offer ALL the same functionality as Google Assistant and requires an active data connection, but more features will be added over time. There's also now a Gemini Advanced tier, which offers access to Google's most powerful Ultra 1.0 LLM. Access to Gemini Advanced requires a subscription to the new $20/month "AI Premium" Google One plan, which offers the same benefits as the 2TB plan but adds access to Gemini Advanced and soon Gemini features in Gmail, Docs, & other Workspace apps (formerly under the Duet AI umbrella). Gemini Advanced is available in English on the web.

Mishaal Rahman

38,428 views โ€ข 2 years ago