Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Evilginx Pro phishing framework for red teams is launching in just 5 days! 😲 Here is a short demonstration of how easy it is to deploy a new phishing server, without ever leaving your terminal window. Learn more about Evilginx Pro here:

mrgretzky's profile picture

Kuba Gretzky

17,127 subscribers

20,443 görüntüleme • 1 yıl önce •via X (Twitter)

OyunBilim & Teknoloji
LIVE

Anya Rossi• Live Now

Private livecam show

5 Yorum

Mohamed AbuMuslim (أبومُسْلِم) profil fotoğrafı
Mohamed AbuMuslim (أبومُسْلِم)1 yıl önce

The NSA project dropping new features

Soccer Bot™ profil fotoğrafı
Soccer Bot™2 yıl önce

Match Summary 💙 Get an absolute overview of your server several times - with the new Match Summary. Relax and never miss a game again. Activate the new function for your server today. Try Soccer Bot™:

Rusty Dogge profil fotoğrafı
Rusty Dogge1 yıl önce

Loved writing up docs on how we used this to Red Team companies. It is an amazing Proxy.

YogSec profil fotoğrafı
YogSec1 yıl önce

🔥🔥🔥

t3ch profil fotoğrafı
t3ch1 yıl önce

Can’t wait for this dude

Benzer Videolar

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:
2:16

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:

Kuba Gretzky

43,841 görüntüleme • 2 yıl önce

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba
12:59

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Kuba Gretzky

23,097 görüntüleme • 3 gün önce

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟
0:33

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

Kuba Gretzky

33,847 görüntüleme • 19 gün önce

Ubuntu Pro for WSL is a Windows application that automates the attachment of your Ubuntu Pro subscription to instances of Ubuntu on WSL. The Pro for WSL application makes it possible to securely deploy instances of Ubuntu on WSL at scale. 🎥 Learn how to get started with Ubuntu Pro for WSL on Windows.
2:07

Ubuntu Pro for WSL is a Windows application that automates the attachment of your Ubuntu Pro subscription to instances of Ubuntu on WSL. The Pro for WSL application makes it possible to securely deploy instances of Ubuntu on WSL at scale. 🎥 Learn how to get started with Ubuntu Pro for WSL on Windows.

Ubuntu

28,595 görüntüleme • 7 ay önce

HERE IS WHAT PRO PLAYERS DON’T TELL YOU ABOUT GK TRAINING 🧤 LEARN HOW TO CORRECTLY TRAIN YOUR GK✅:
1:11

HERE IS WHAT PRO PLAYERS DON’T TELL YOU ABOUT GK TRAINING 🧤 LEARN HOW TO CORRECTLY TRAIN YOUR GK✅:

Trqvis_ efb

15,463 görüntüleme • 1 ay önce

🎣 AI-powered phishing scams have become harder to spot. Today, 1Password is beginning the rollout of a new phishing prevention feature that adds an extra layer of protection: ❌ No autofill on suspicious URLs ⚠️ Clear warnings if someone tries to enter their password anyway It’s a simple moment of friction that can prevent a costly mistake. 👉 Learn more: #CyberSecurity #Phishing #AIsecurity #IdentitySecurity #1Password
0:40

🎣 AI-powered phishing scams have become harder to spot. Today, 1Password is beginning the rollout of a new phishing prevention feature that adds an extra layer of protection: ❌ No autofill on suspicious URLs ⚠️ Clear warnings if someone tries to enter their password anyway It’s a simple moment of friction that can prevent a costly mistake. 👉 Learn more: #CyberSecurity #Phishing #AIsecurity #IdentitySecurity #1Password

1Password

14,164 görüntüleme • 5 ay önce

The `satisfies` operator in TypeScript 4.9 is a game changer Here is a quick overview of how it compares to a couple alternative ways of annotating types Learn more about the `satisfies` operator here:
1:53

The `satisfies` operator in TypeScript 4.9 is a game changer Here is a quick overview of how it compares to a couple alternative ways of annotating types Learn more about the `satisfies` operator here:

Steve (Builder.io)

257,768 görüntüleme • 3 yıl önce

More flowers = more fruit = bigger harvest. Epsom salt is one of the most underrated, budget-friendly garden hacks out there if you use it correctly. Here is the ultimate visual guide on how to apply it like a pro without harming your soil.
0:57

More flowers = more fruit = bigger harvest. Epsom salt is one of the most underrated, budget-friendly garden hacks out there if you use it correctly. Here is the ultimate visual guide on how to apply it like a pro without harming your soil.

PeachProof

45,529 görüntüleme • 1 ay önce

Always been a dream of mine to present at Apple's WWDC... and that dream is now a reality! Here it is: Principles of spatial design Learn how to design spatially for Apple Vision Pro and visionOS #WWDC23 full video:
1:24

Always been a dream of mine to present at Apple's WWDC... and that dream is now a reality! Here it is: Principles of spatial design Learn how to design spatially for Apple Vision Pro and visionOS #WWDC23 full video:

Nathan Gitter

319,241 görüntüleme • 3 yıl önce

🙌 The future of pro clubs is nearly here! 📱 We have created a social media app for pro clubs. - Social Feed. - Notifications. - Realtime chat. - Followers / Following. - Recruitment. - Easy to navigate. - Communication is next level, making it easy to message any user / club. - Manage your team - schedule, players and more. All one one place, making the process easy for new users to get involved. #ProClubs #SaveProClubs #FIFA23
1:17

🙌 The future of pro clubs is nearly here! 📱 We have created a social media app for pro clubs. - Social Feed. - Notifications. - Realtime chat. - Followers / Following. - Recruitment. - Easy to navigate. - Communication is next level, making it easy to message any user / club. - Manage your team - schedule, players and more. All one one place, making the process easy for new users to get involved. #ProClubs #SaveProClubs #FIFA23

Virtual Pro Gaming

45,912 görüntüleme • 3 yıl önce

The new R Λ Z Ξ R BlackShark V3 Pro is here, engineered directly with the feedback of our CS players. Learn more about the #BSV3Pro:
0:45

The new R Λ Z Ξ R BlackShark V3 Pro is here, engineered directly with the feedback of our CS players. Learn more about the #BSV3Pro:

MOUZ

53,151 görüntüleme • 11 ay önce

Attackers are using hacked email accounts of business executives to send fake Microsoft onedrive notifications that end in a theft of the new victim's login details. This phishing campaign is not new but I experienced one that hasn't been shut down yet and I thought to share. The attackers are exploiting the reputation of an established domain to send an email. The link in the phishing mail points to an actual sharepoint file so this phishing email will pass through most email security tools without being flagged. I'll share a more technical breakdown of this attack in the coming days. This one is for the everyday user to get a feel of what's happening. Rule of thumb, please do not click links in emails you were not expecting. PS: Have you experienced this before? Please share your thoughts in the Replies section. #cybersecurity #technology #phishing #microsoft
3:15

Attackers are using hacked email accounts of business executives to send fake Microsoft onedrive notifications that end in a theft of the new victim's login details. This phishing campaign is not new but I experienced one that hasn't been shut down yet and I thought to share. The attackers are exploiting the reputation of an established domain to send an email. The link in the phishing mail points to an actual sharepoint file so this phishing email will pass through most email security tools without being flagged. I'll share a more technical breakdown of this attack in the coming days. This one is for the everyday user to get a feel of what's happening. Rule of thumb, please do not click links in emails you were not expecting. PS: Have you experienced this before? Please share your thoughts in the Replies section. #cybersecurity #technology #phishing #microsoft

Confidence Staveley

11,967 görüntüleme • 2 yıl önce

introducing Context for Nano Banana. we created a brand new tool for Nano Banana Pro that makes it easy to add context to your generations. learn more 👇
0:50

introducing Context for Nano Banana. we created a brand new tool for Nano Banana Pro that makes it easy to add context to your generations. learn more 👇

Krea

122,123 görüntüleme • 7 ay önce

It's 5 days to Christmas! This is how to make a Chinese beef sauce and Rice like pro at home Very easy & delicious!
3:11

It's 5 days to Christmas! This is how to make a Chinese beef sauce and Rice like pro at home Very easy & delicious!

Tspices Kitchen

391,365 görüntüleme • 2 yıl önce

Today we’re launching a totally new way to pay with Tiptop’s instant trade in at checkout. Here is how it works and why we're exited about it.
6:03

Today we’re launching a totally new way to pay with Tiptop’s instant trade in at checkout. Here is how it works and why we're exited about it.

Bastian Lehmann 🇺🇸

195,571 görüntüleme • 2 yıl önce

How To "GLITCH" Your Hot Routes In CFB26 EVERY PRO PLAYER is currently doing this! It creates way more offensive creativity and is something you need to learn how to do.
3:20

How To "GLITCH" Your Hot Routes In CFB26 EVERY PRO PLAYER is currently doing this! It creates way more offensive creativity and is something you need to learn how to do.

Dcroft

53,814 görüntüleme • 1 yıl önce

We’re launching “Meet Mark,” a new ad campaign that highlights how the 340B hospital markup program is driving up costs for patients, taxpayers and employers. Meet Mark and learn more about 340B abuses here:
0:30

We’re launching “Meet Mark,” a new ad campaign that highlights how the 340B hospital markup program is driving up costs for patients, taxpayers and employers. Meet Mark and learn more about 340B abuses here:

PhRMA

96,693 görüntüleme • 10 ay önce

NEW: President Trump declared a crucial U.S. trade "deal with China is done.” Top U.S.-China teams wrapped two days of tense talks here in London. But the “framework” is long on hope and little on detail. The latest ✍️ and how we got here from Tuesday 🎥…
3:25

NEW: President Trump declared a crucial U.S. trade "deal with China is done.” Top U.S.-China teams wrapped two days of tense talks here in London. But the “framework” is long on hope and little on detail. The latest ✍️ and how we got here from Tuesday 🎥…

Ramy Inocencio 英若明

12,736 görüntüleme • 1 yıl önce

The Framework 13 Pro is the best PC laptop I've ever tried. For the first time in a long time, I'm excited about computers again.
8:54

The Framework 13 Pro is the best PC laptop I've ever tried. For the first time in a long time, I'm excited about computers again.

Santiago

86,423 görüntüleme • 2 ay önce