Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:

Kuba Gretzky

17,256 subscribers

43,929 views • 2 years ago •via X (Twitter)

Science & Technology Health & Wellness Gaming

Anya Rossi• Live Now

Private livecam show

10 Comments

mr.d0x2 years ago

🔥🔥

Pentest List2 years ago

🔥

Kuba Gretzky2 years ago

Me too 😂 Would be great to drop it already!

Neil2 years ago

Man i couldnt quite build that during my last engagement. Considered just doing a single phish at a time, will be nice to just pay and have it all ready to go.

Kuba Gretzky2 years ago

I am working on making it as plug-and-play as possible 🙂

DheReckahCoded1 year ago

Good Job 👍🏽 @mrgretzky I hope the big tech like Google aren’t worried because am also coming up with something, your tool is always sample to each of anyone of us whose intent is to deeply look into the advance 2fa bypass

ragey🎗️2 years ago

you are one badass dude

Amin1 year ago

Cant wait to have it available

Ach Raf2 years ago

When you will open the registration for the pro version? I am waiting for months now 🥲

Kuba Gretzky2 years ago

Today 🙂

Related Videos

Evilginx Pro phishing framework for red teams is launching in just 5 days! 😲 Here is a short demonstration of how easy it is to deploy a new phishing server, without ever leaving your terminal window. Learn more about Evilginx Pro here:

Evilginx Pro phishing framework for red teams is launching in just 5 days! 😲 Here is a short demonstration of how easy it is to deploy a new phishing server, without ever leaving your terminal window. Learn more about Evilginx Pro here:

Kuba Gretzky

20,446 views • 1 year ago

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Kuba Gretzky

25,485 views • 1 month ago

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

Kuba Gretzky

34,248 views • 1 month ago

#VisualStudio2026 is coming and the first release of Insiders is here TODAY for you to try! Get it! ✨ AI Integrated Development 🏎️ Blazing Fast Performance 😍 Modern Look & Feel

#VisualStudio2026 is coming and the first release of Insiders is here TODAY for you to try! Get it! ✨ AI Integrated Development 🏎️ Blazing Fast Performance 😍 Modern Look & Feel

James Montemagno

10,972 views • 11 months ago

🚨🚨🚨JULY 18TH🚨🚨🚨 The wait is coming to an end. Advent NEON, will FINALLY release to Steam on July 18th! Thank you all for your support over the years! Wishlist it, try the demo and GET READY! #gamedev #indiedev

🚨🚨🚨JULY 18TH🚨🚨🚨 The wait is coming to an end. Advent NEON, will FINALLY release to Steam on July 18th! Thank you all for your support over the years! Wishlist it, try the demo and GET READY! #gamedev #indiedev

Advent NEON - 🚨🚨OUT NOW!!🚨🚨

342,959 views • 1 year ago

My Houdini wedge creator tool is out! I've been struggling to release it for a while. It is available for Indie and Apprentice licences (for now), and it is completly free 🤩 You can download and learn how to use it here: More info ⬇️⬇️⬇️

My Houdini wedge creator tool is out! I've been struggling to release it for a while. It is available for Indie and Apprentice licences (for now), and it is completly free 🤩 You can download and learn how to use it here: More info ⬇️⬇️⬇️

mayz 🍉🌈

13,653 views • 1 year ago

Thrilled to announce my debut single as a vocalist is almost here! I can't wait for you to hear it 😃 I've collaborated with some incredibly talented people. Release date coming soon! Touchē, Essa Kay, Marcus MC & Sundile 🙏🏾🙏🏾

Thrilled to announce my debut single as a vocalist is almost here! I can't wait for you to hear it 😃 I've collaborated with some incredibly talented people. Release date coming soon! Touchē, Essa Kay, Marcus MC & Sundile 🙏🏾🙏🏾

Siphesihle Roseous

63,564 views • 1 year ago

🚨ATTENTION EDITORS/CONTENT CREATORS🚨 I've been working on an extension for a while and it's first version is finally out for release! First 10 people to buy it can get 25% off with the code "LAUNCH25" at checkout!

🚨ATTENTION EDITORS/CONTENT CREATORS🚨 I've been working on an extension for a while and it's first version is finally out for release! First 10 people to buy it can get 25% off with the code "LAUNCH25" at checkout!

Adge

51,846 views • 2 years ago

Really excited with how the particle shader is turning out! Here's a quick little showcase for some of the cool effects you can create with it! It's not finished yet but it's already extremely versatile. I can't wait to release this soon, get subscribed on patreon for more!

Really excited with how the particle shader is turning out! Here's a quick little showcase for some of the cool effects you can create with it! It's not finished yet but it's already extremely versatile. I can't wait to release this soon, get subscribed on patreon for more!

Mochie

15,119 views • 3 months ago

Customizable Chibi Update! IT'LL BE AVAILABLE VERY SOON! All the effort is paying off TT I can't wait for you guys to use it! Product preview is available on vgen to get notified of the release! Here's a video example for the customizable chibi! More updates very soon! ><

Customizable Chibi Update! IT'LL BE AVAILABLE VERY SOON! All the effort is paying off TT I can't wait for you guys to use it! Product preview is available on vgen to get notified of the release! Here's a video example for the customizable chibi! More updates very soon! ><

Arisu Haguruma @ Vgen ♡

43,293 views • 16 days ago

🚨Mollie RIPS the Biden Admin for spending almost $300M of taxpayer dollars to suppress speech under guise of “misinformation” — “It's a horrific violation of the First Amendment. Americans need to know how much money is going into it, and that money needs to stop flowing immediately." Exactly. The era of taxpayer-funded censorship is finished. Another reason January 20 can’t get here soon enough.

🚨Mollie RIPS the Biden Admin for spending almost $300M of taxpayer dollars to suppress speech under guise of “misinformation” — “It's a horrific violation of the First Amendment. Americans need to know how much money is going into it, and that money needs to stop flowing immediately." Exactly. The era of taxpayer-funded censorship is finished. Another reason January 20 can’t get here soon enough.

Western Lensman

116,749 views • 1 year ago

Golfers: Here is how to use an alignment stick to get rid of swing thoughts. I just used this on a Pro yesterday who was struggling with a bunch of backswing thoughts. Once you cross it, it is game on...

Golfers: Here is how to use an alignment stick to get rid of swing thoughts. I just used this on a Pro yesterday who was struggling with a bunch of backswing thoughts. Once you cross it, it is game on...

Drake Smith

27,697 views • 18 days ago

Spent the weekend exploring the new Coinbase Developer Platform🛡️ AgentKit 0.1.0 release - it is extremely powerful! I put together an open-source template that allows you to create a web-based, multi-chain agent capable of taking 20+ actions. Check out the demo!

Spent the weekend exploring the new Coinbase Developer Platform🛡️ AgentKit 0.1.0 release - it is extremely powerful! I put together an open-source template that allows you to create a web-based, multi-chain agent capable of taking 20+ actions. Check out the demo!

Jason Hedman

23,301 views • 1 year ago

God of War Laufey's PS5 release date is effectively "coming soon, wishlist now." That would usually put it on track to release between October - December 2026. I suspect PlayStation just wants to give Wolverine the pre-order spotlight for now. And the latest I could see Laufey is Feb/Mar. 2027 to keep it inside their fiscal year. Jason Schreier of Bloomberg also seems to hint inside knowledge that it "isn't years away."

God of War Laufey's PS5 release date is effectively "coming soon, wishlist now." That would usually put it on track to release between October - December 2026. I suspect PlayStation just wants to give Wolverine the pre-order spotlight for now. And the latest I could see Laufey is Feb/Mar. 2027 to keep it inside their fiscal year. Jason Schreier of Bloomberg also seems to hint inside knowledge that it "isn't years away."

Fran Mirabella III (FM3)

238,252 views • 2 months ago

🚨 First look at the Singularry DApp is here! 🚨 We’re beyond excited to share a preview of our first release — intuitive, powerful, and built for the future of Web3. 🎥 Watch the sneak peek below ⏳ Official launch coming very soon...

🚨 First look at the Singularry DApp is here! 🚨 We’re beyond excited to share a preview of our first release — intuitive, powerful, and built for the future of Web3. 🎥 Watch the sneak peek below ⏳ Official launch coming very soon...

Singularry

10,964 views • 1 year ago

QUICK RELEASE IN WORKOUTS One of the reasons players can’t translate shooting success I. Workouts to shooting success in games is because their preparation and release in training isn’t as fast as it is in games. You’ll see great shooters like Steph push themselves to prepare quickly and then release the ball with pace, just like they would do in games. I like to use the Spalding TF DNA ball bc it monitors release time so players can’t question when I tell them to ‘get off the ball quicker’ 🙌🙌🙌

QUICK RELEASE IN WORKOUTS One of the reasons players can’t translate shooting success I. Workouts to shooting success in games is because their preparation and release in training isn’t as fast as it is in games. You’ll see great shooters like Steph push themselves to prepare quickly and then release the ball with pace, just like they would do in games. I like to use the Spalding TF DNA ball bc it monitors release time so players can’t question when I tell them to ‘get off the ball quicker’ 🙌🙌🙌

Steve Dagostino

11,977 views • 1 year ago

🚨Davido reveals that he originally wanted “ORIADÉ” to be a surprise Album 😄 “I actually wanted it to be a surprise album & just announce the day before release & just be like 12 a.m. the album is coming, but obviously we wanted to plan better. That might just throw people off because you don’t know what people might be planning. We think we want people to prepare for this one.”

🚨Davido reveals that he originally wanted “ORIADÉ” to be a surprise Album 😄 “I actually wanted it to be a surprise album & just announce the day before release & just be like 12 a.m. the album is coming, but obviously we wanted to plan better. That might just throw people off because you don’t know what people might be planning. We think we want people to prepare for this one.”

HYPETRIBE

177,807 views • 1 month ago