正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Evilginx Pro phishing framework for red teams is launching in just 5 days! 😲 Here is a short demonstration of how easy it is to deploy a new phishing server, without ever leaving your terminal window. Learn more about Evilginx Pro here:

Kuba Gretzky

17,223 subscribers

20,446 次观看 • 1 年前 •via X (Twitter)

游戏科学技术

Anya Rossi• Live Now

Private livecam show

5 条评论

Mohamed AbuMuslim (أبومُسْلِم) 的头像

Mohamed AbuMuslim (أبومُسْلِم)1 年前

The NSA project dropping new features

Soccer Bot™ 的头像

Soccer Bot™2 年前

Match Summary 💙 Get an absolute overview of your server several times - with the new Match Summary. Relax and never miss a game again. Activate the new function for your server today. Try Soccer Bot™:

Rusty Dogge 的头像

Rusty Dogge1 年前

Loved writing up docs on how we used this to Red Team companies. It is an amazing Proxy.

YogSec 的头像

YogSec1 年前

🔥🔥🔥

t3ch 的头像

t3ch1 年前

Can’t wait for this dude

相关视频

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:

Kuba Gretzky

43,929 次观看 • 2 年前

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Kuba Gretzky

25,485 次观看 • 26 天前

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

Kuba Gretzky

34,248 次观看 • 1 个月前

Ubuntu Pro for WSL is a Windows application that automates the attachment of your Ubuntu Pro subscription to instances of Ubuntu on WSL. The Pro for WSL application makes it possible to securely deploy instances of Ubuntu on WSL at scale. 🎥 Learn how to get started with Ubuntu Pro for WSL on Windows.

Ubuntu Pro for WSL is a Windows application that automates the attachment of your Ubuntu Pro subscription to instances of Ubuntu on WSL. The Pro for WSL application makes it possible to securely deploy instances of Ubuntu on WSL at scale. 🎥 Learn how to get started with Ubuntu Pro for WSL on Windows.

Ubuntu

28,595 次观看 • 8 个月前

HERE IS WHAT PRO PLAYERS DON’T TELL YOU ABOUT GK TRAINING 🧤 LEARN HOW TO CORRECTLY TRAIN YOUR GK✅:

HERE IS WHAT PRO PLAYERS DON’T TELL YOU ABOUT GK TRAINING 🧤 LEARN HOW TO CORRECTLY TRAIN YOUR GK✅:

Trqvis_ efb

15,530 次观看 • 2 个月前

🎣 AI-powered phishing scams have become harder to spot. Today, 1Password is beginning the rollout of a new phishing prevention feature that adds an extra layer of protection: ❌ No autofill on suspicious URLs ⚠️ Clear warnings if someone tries to enter their password anyway It’s a simple moment of friction that can prevent a costly mistake. 👉 Learn more: #CyberSecurity #Phishing #AIsecurity #IdentitySecurity #1Password

🎣 AI-powered phishing scams have become harder to spot. Today, 1Password is beginning the rollout of a new phishing prevention feature that adds an extra layer of protection: ❌ No autofill on suspicious URLs ⚠️ Clear warnings if someone tries to enter their password anyway It’s a simple moment of friction that can prevent a costly mistake. 👉 Learn more: #CyberSecurity #Phishing #AIsecurity #IdentitySecurity #1Password

1Password

14,168 次观看 • 6 个月前

The `satisfies` operator in TypeScript 4.9 is a game changer Here is a quick overview of how it compares to a couple alternative ways of annotating types Learn more about the `satisfies` operator here:

The `satisfies` operator in TypeScript 4.9 is a game changer Here is a quick overview of how it compares to a couple alternative ways of annotating types Learn more about the `satisfies` operator here:

Steve (Builder.io)

257,784 次观看 • 3 年前

More flowers = more fruit = bigger harvest. Epsom salt is one of the most underrated, budget-friendly garden hacks out there if you use it correctly. Here is the ultimate visual guide on how to apply it like a pro without harming your soil.

More flowers = more fruit = bigger harvest. Epsom salt is one of the most underrated, budget-friendly garden hacks out there if you use it correctly. Here is the ultimate visual guide on how to apply it like a pro without harming your soil.

PeachProof

45,621 次观看 • 2 个月前

Always been a dream of mine to present at Apple's WWDC... and that dream is now a reality! Here it is: Principles of spatial design Learn how to design spatially for Apple Vision Pro and visionOS #WWDC23 full video:

Always been a dream of mine to present at Apple's WWDC... and that dream is now a reality! Here it is: Principles of spatial design Learn how to design spatially for Apple Vision Pro and visionOS #WWDC23 full video:

Nathan Gitter

319,262 次观看 • 3 年前

🙌 The future of pro clubs is nearly here! 📱 We have created a social media app for pro clubs. - Social Feed. - Notifications. - Realtime chat. - Followers / Following. - Recruitment. - Easy to navigate. - Communication is next level, making it easy to message any user / club. - Manage your team - schedule, players and more. All one one place, making the process easy for new users to get involved. #ProClubs #SaveProClubs #FIFA23

🙌 The future of pro clubs is nearly here! 📱 We have created a social media app for pro clubs. - Social Feed. - Notifications. - Realtime chat. - Followers / Following. - Recruitment. - Easy to navigate. - Communication is next level, making it easy to message any user / club. - Manage your team - schedule, players and more. All one one place, making the process easy for new users to get involved. #ProClubs #SaveProClubs #FIFA23

Virtual Pro Gaming

45,912 次观看 • 3 年前

The new R Λ Z Ξ R BlackShark V3 Pro is here, engineered directly with the feedback of our CS players. Learn more about the #BSV3Pro:

The new R Λ Z Ξ R BlackShark V3 Pro is here, engineered directly with the feedback of our CS players. Learn more about the #BSV3Pro:

MOUZ

54,256 次观看 • 1 年前

Attackers are using hacked email accounts of business executives to send fake Microsoft onedrive notifications that end in a theft of the new victim's login details. This phishing campaign is not new but I experienced one that hasn't been shut down yet and I thought to share. The attackers are exploiting the reputation of an established domain to send an email. The link in the phishing mail points to an actual sharepoint file so this phishing email will pass through most email security tools without being flagged. I'll share a more technical breakdown of this attack in the coming days. This one is for the everyday user to get a feel of what's happening. Rule of thumb, please do not click links in emails you were not expecting. PS: Have you experienced this before? Please share your thoughts in the Replies section. #cybersecurity #technology #phishing #microsoft

Attackers are using hacked email accounts of business executives to send fake Microsoft onedrive notifications that end in a theft of the new victim's login details. This phishing campaign is not new but I experienced one that hasn't been shut down yet and I thought to share. The attackers are exploiting the reputation of an established domain to send an email. The link in the phishing mail points to an actual sharepoint file so this phishing email will pass through most email security tools without being flagged. I'll share a more technical breakdown of this attack in the coming days. This one is for the everyday user to get a feel of what's happening. Rule of thumb, please do not click links in emails you were not expecting. PS: Have you experienced this before? Please share your thoughts in the Replies section. #cybersecurity #technology #phishing #microsoft

Confidence Staveley

11,971 次观看 • 2 年前

introducing Context for Nano Banana. we created a brand new tool for Nano Banana Pro that makes it easy to add context to your generations. learn more 👇

Krea

122,123 次观看 • 8 个月前

It's 5 days to Christmas! This is how to make a Chinese beef sauce and Rice like pro at home Very easy & delicious!

It's 5 days to Christmas! This is how to make a Chinese beef sauce and Rice like pro at home Very easy & delicious!

Tspices Kitchen

392,740 次观看 • 2 年前

Today we’re launching a totally new way to pay with Tiptop’s instant trade in at checkout. Here is how it works and why we're exited about it.

Today we’re launching a totally new way to pay with Tiptop’s instant trade in at checkout. Here is how it works and why we're exited about it.

Bastian Lehmann 🇺🇸

195,580 次观看 • 2 年前

How To "GLITCH" Your Hot Routes In CFB26 EVERY PRO PLAYER is currently doing this! It creates way more offensive creativity and is something you need to learn how to do.

How To "GLITCH" Your Hot Routes In CFB26 EVERY PRO PLAYER is currently doing this! It creates way more offensive creativity and is something you need to learn how to do.

Dcroft

53,814 次观看 • 1 年前

We’re launching “Meet Mark,” a new ad campaign that highlights how the 340B hospital markup program is driving up costs for patients, taxpayers and employers. Meet Mark and learn more about 340B abuses here:

We’re launching “Meet Mark,” a new ad campaign that highlights how the 340B hospital markup program is driving up costs for patients, taxpayers and employers. Meet Mark and learn more about 340B abuses here:

PhRMA

96,693 次观看 • 11 个月前

NEW: President Trump declared a crucial U.S. trade "deal with China is done.” Top U.S.-China teams wrapped two days of tense talks here in London. But the “framework” is long on hope and little on detail. The latest ✍️ and how we got here from Tuesday 🎥…

NEW: President Trump declared a crucial U.S. trade "deal with China is done.” Top U.S.-China teams wrapped two days of tense talks here in London. But the “framework” is long on hope and little on detail. The latest ✍️ and how we got here from Tuesday 🎥…

Ramy Inocencio 英若明

12,736 次观看 • 1 年前

Learn more about Strongholds. Upgrades. Guild power plays. ⚔️ Realm Series VI is here. In Valannia, a guild is more than just a squad!

Learn more about Strongholds. Upgrades. Guild power plays. ⚔️ Realm Series VI is here. In Valannia, a guild is more than just a squad!

Valannia

12,527 次观看 • 11 个月前