Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable...

mrgretzky's profile picture

Kuba Gretzky

17,117 subscribers

33,412 Aufrufe • vor 9 Tagen •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

🎬Phishing LinkedIn and bypassing MFA demo created for the upcoming Evilginx Pro post 🔥 💡Evilginx uses a background browser to capture the secret token from legitimate website and inject it back into the reverse proxy phishing session. P.S. Enjoy that Cyberpunk tune I made 🎵
1:37

🎬Phishing LinkedIn and bypassing MFA demo created for the upcoming Evilginx Pro post 🔥 💡Evilginx uses a background browser to capture the secret token from legitimate website and inject it back into the reverse proxy phishing session. P.S. Enjoy that Cyberpunk tune I made 🎵

Kuba Gretzky

75,490 Aufrufe • vor 2 Jahren

🚨 Evilginx Pro is launching TOMORROW, February 25th! Evilginx Pro will provide access to the official phishlets database from day one. 🪝🐟 Currently supported: - Google - MS365 Business - Outlook Mail - Okta Demo below on how to access phishlets.
0:29

🚨 Evilginx Pro is launching TOMORROW, February 25th! Evilginx Pro will provide access to the official phishlets database from day one. 🪝🐟 Currently supported: - Google - MS365 Business - Outlook Mail - Okta Demo below on how to access phishlets.

Kuba Gretzky

23,536 Aufrufe • vor 1 Jahr

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:
2:16

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:

Kuba Gretzky

43,841 Aufrufe • vor 2 Jahren

Okta chained with Azure with auto MFA subscription for Okta and frame-buster bypass to perform Bitb ! Evilginx is really nice to setup custom phishing campaign whatever the environment is... Phishlet available here :
1:34

Okta chained with Azure with auto MFA subscription for Okta and frame-buster bypass to perform Bitb ! Evilginx is really nice to setup custom phishing campaign whatever the environment is... Phishlet available here :

OtterHacker

42,029 Aufrufe • vor 1 Jahr

The upcoming Picture-in-Picture API that Chrome is pushing is soo promising! 🤩 Nuxt DevTools will be able to pop up as a separate window soon!
0:20

The upcoming Picture-in-Picture API that Chrome is pushing is soo promising! 🤩 Nuxt DevTools will be able to pop up as a separate window soon!

Anthony Fu 🦋 @antfu.me

316,390 Aufrufe • vor 3 Jahren

Evilginx Pro phishing framework for red teams is launching in just 5 days! 😲 Here is a short demonstration of how easy it is to deploy a new phishing server, without ever leaving your terminal window. Learn more about Evilginx Pro here:
0:24

Evilginx Pro phishing framework for red teams is launching in just 5 days! 😲 Here is a short demonstration of how easy it is to deploy a new phishing server, without ever leaving your terminal window. Learn more about Evilginx Pro here:

Kuba Gretzky

20,423 Aufrufe • vor 1 Jahr

🚨 New Crypto Pop-Up Is Draining Users 🚨 If you use a crypto wallet, you're familiar with the embedded browser pop-up that prompts you to sign transactions. However, scammers are now exploiting this in an updated scam tactic. When a user navigates to a scam site via social engineering, sponsored scam ads, or scam comments on X with a look-alike link, it mirrors the real website, in this case, to claim a Jupiter airdrop (not real). The website mirrors the real site exactly and follows the normal flow: clicking "connect wallet," then detecting which wallets you have installed in the browser. In this VM, I have MetaMask 🦊 and Phantom installed, so it detected both. I was already logged into MetaMask, so when I clicked on it, instead of prompting me within the MetaMask browser extension, it created a new pop-up window (separate browser window) impersonating MetaMask, displaying the URL and mimicking the real MetaMask behavior. Since my MetaMask wallet was empty, it said I "was not eligible". But if I had any funds in the wallet, it would have prompted for a wallet-draining signature/approval. When I tested with Phantom, it followed the same flow. However, because I wasn't logged into Phantom, the fake window impersonating Phantom popped up first, followed by the real Phantom prompt within the browser asking me to log in so that way the scam window pop up could prompt me for a scam approval/signature to drain that wallet after I logged into my legit wallet. While you may be watching this closely and catching the red flags, like the scam Vercel app URL showing in the address bar, many people don't read anything when prompted for a wallet connection or signature. They simply click. This scam has already drained many wallets because people click without taking even one second to review what they're signing. Always, no matter what, take at least a few seconds to review what you're signing in your wallet each time. Something as simple as noticing the URL bar could save you from losing everything….. Stay Safe & Stay Vigilant
0:21

🚨 New Crypto Pop-Up Is Draining Users 🚨 If you use a crypto wallet, you're familiar with the embedded browser pop-up that prompts you to sign transactions. However, scammers are now exploiting this in an updated scam tactic. When a user navigates to a scam site via social engineering, sponsored scam ads, or scam comments on X with a look-alike link, it mirrors the real website, in this case, to claim a Jupiter airdrop (not real). The website mirrors the real site exactly and follows the normal flow: clicking "connect wallet," then detecting which wallets you have installed in the browser. In this VM, I have MetaMask 🦊 and Phantom installed, so it detected both. I was already logged into MetaMask, so when I clicked on it, instead of prompting me within the MetaMask browser extension, it created a new pop-up window (separate browser window) impersonating MetaMask, displaying the URL and mimicking the real MetaMask behavior. Since my MetaMask wallet was empty, it said I "was not eligible". But if I had any funds in the wallet, it would have prompted for a wallet-draining signature/approval. When I tested with Phantom, it followed the same flow. However, because I wasn't logged into Phantom, the fake window impersonating Phantom popped up first, followed by the real Phantom prompt within the browser asking me to log in so that way the scam window pop up could prompt me for a scam approval/signature to drain that wallet after I logged into my legit wallet. While you may be watching this closely and catching the red flags, like the scam Vercel app URL showing in the address bar, many people don't read anything when prompted for a wallet connection or signature. They simply click. This scam has already drained many wallets because people click without taking even one second to review what they're signing. Always, no matter what, take at least a few seconds to review what you're signing in your wallet each time. Something as simple as noticing the URL bar could save you from losing everything….. Stay Safe & Stay Vigilant

NFT_Dreww.eth

47,397 Aufrufe • vor 5 Monaten

WATCH | Members of the up-and-coming P-pop girl group XONARA expressed their gratitude for fans for welcoming them in the P-pop scene. The septet is set to make its debut on May 16 and the first P-pop girl group under 1Z Entertainment, the management of P-pop powerhouse SB19.
0:55

WATCH | Members of the up-and-coming P-pop girl group XONARA expressed their gratitude for fans for welcoming them in the P-pop scene. The septet is set to make its debut on May 16 and the first P-pop girl group under 1Z Entertainment, the management of P-pop powerhouse SB19.

MANILA STANDARD Lifestyle & Showbiz

27,556 Aufrufe • vor 2 Monaten

#CORTIS made a surprise visit to the FNAC pop-up in Paris!
0:28

#CORTIS made a surprise visit to the FNAC pop-up in Paris!

星星

48,416 Aufrufe • vor 15 Tagen

⚠️ Careful out there frens! Scammers are running Google ads for different sites that points to phishing sites hosted on sites[.]google[.]com This screenshot is a perfect example of why people get scammed in crypto searches. The “Sponsored” result at the top is a fake Uniswap link hosted on Google Sites, not the real Uniswap domain. Clicking it would drain wallets if someone approves. I almost fell for this, thanks to Rabby Wallet! Check the video below to see the similarity and yet difference, making it harder to notice if not observant. - Fake site tries to pop up fake web3injector - Not listed on Rabby (huge red flag for a popular domain)
0:52

⚠️ Careful out there frens! Scammers are running Google ads for different sites that points to phishing sites hosted on sites[.]google[.]com This screenshot is a perfect example of why people get scammed in crypto searches. The “Sponsored” result at the top is a fake Uniswap link hosted on Google Sites, not the real Uniswap domain. Clicking it would drain wallets if someone approves. I almost fell for this, thanks to Rabby Wallet! Check the video below to see the similarity and yet difference, making it harder to notice if not observant. - Fake site tries to pop up fake web3injector - Not listed on Rabby (huge red flag for a popular domain)

〽️ᄃﾑt 🐾

26,980 Aufrufe • vor 10 Monaten

The ultimate threat in any game? The dreaded “DELETE TO MAKE SPACE FOR ANOTHER GAME” pop up 😱 Don’t worry, the #SANDISK microSD Express card is here to level up your storage game! 💪
0:30

The ultimate threat in any game? The dreaded “DELETE TO MAKE SPACE FOR ANOTHER GAME” pop up 😱 Don’t worry, the #SANDISK microSD Express card is here to level up your storage game! 💪

Sandisk

50,169 Aufrufe • vor 7 Monaten

Android Studio is coming soon to #ProjectIDX. 😎 With just a few clicks in your browser, you can set up a workspace to code, build, and test native Android apps. Join the waitlist to be one of the first to try it! 🛠️ →
0:45

Android Studio is coming soon to #ProjectIDX. 😎 With just a few clicks in your browser, you can set up a workspace to code, build, and test native Android apps. Join the waitlist to be one of the first to try it! 🛠️ →

Google for Developers

25,233 Aufrufe • vor 2 Jahren

Despite the rain fans and non fans alike have started queuing for the TIRTIR pop up in LA. Pop up opens to public in less than 30 minutes
0:27

Despite the rain fans and non fans alike have started queuing for the TIRTIR pop up in LA. Pop up opens to public in less than 30 minutes

TAE GUIDE

83,795 Aufrufe • vor 7 Monaten

Jennie is going to be there, the pop-up launch of Ray Ban, one of the most famous eyewear brands in the world JENNIE RAYBAN FIRST POP UP #JENNIEmeetsRAYBAN
0:24

Jennie is going to be there, the pop-up launch of Ray Ban, one of the most famous eyewear brands in the world JENNIE RAYBAN FIRST POP UP #JENNIEmeetsRAYBAN

sdington

34,012 Aufrufe • vor 10 Monaten

I Love my city! didn’t win a pair but I had to go checkout the pop up for The Undefeated x Air Jordan 4 pair Glad Nike UNDEFEATED Jordan decided to do a pop up in Chicago
0:26

I Love my city! didn’t win a pair but I had to go checkout the pop up for The Undefeated x Air Jordan 4 pair Glad Nike UNDEFEATED Jordan decided to do a pop up in Chicago

SNKRS STOCK

14,474 Aufrufe • vor 11 Monaten

Taehyung for Elle Korea 🐯Hello Elle, this is TIRTIR’s LA popup store which marks a new beginning. Shall we look around together? Q: What comes to your mind when you think of TIRTIR? 🐯Confidence, Diversity, Red and me, V ✌️ Q:What was the best thing about the TIRTIR LA pop-up? 🐯I liked everything so choosing just one is difficult. Firstly, the shade matching zone that measures the skin tone and undertone and matches with the correct product, and the brand zone, which was designed using the props from the campaign photoshoot is especially impressive. Q: If you were to express your experience at the TIRTIR LA pop-up through gestures? 🐯✌️✌️✌️ 🐯 Be sure to experience the TIRTIR pop-up store happening in LA until November 23 V aka KimTIR visited TIRTIR pop-up store currently underway in LA, USA 💋 We reveal moments of V painting the streets of LA and the pop-up site with vivid red❤️‍🔥 If you're in LA right now, stop by the TirTir pop-up to get the RedCushion that V is crazy about, enjoy the various experience zones, and make sure to try the matcha and banana mixology drinks 🔗
1:02

Taehyung for Elle Korea 🐯Hello Elle, this is TIRTIR’s LA popup store which marks a new beginning. Shall we look around together? Q: What comes to your mind when you think of TIRTIR? 🐯Confidence, Diversity, Red and me, V ✌️ Q:What was the best thing about the TIRTIR LA pop-up? 🐯I liked everything so choosing just one is difficult. Firstly, the shade matching zone that measures the skin tone and undertone and matches with the correct product, and the brand zone, which was designed using the props from the campaign photoshoot is especially impressive. Q: If you were to express your experience at the TIRTIR LA pop-up through gestures? 🐯✌️✌️✌️ 🐯 Be sure to experience the TIRTIR pop-up store happening in LA until November 23 V aka KimTIR visited TIRTIR pop-up store currently underway in LA, USA 💋 We reveal moments of V painting the streets of LA and the pop-up site with vivid red❤️‍🔥 If you're in LA right now, stop by the TirTir pop-up to get the RedCushion that V is crazy about, enjoy the various experience zones, and make sure to try the matcha and banana mixology drinks 🔗

Taehyung Naver || 네이버 김태형

28,940 Aufrufe • vor 7 Monaten

The Pop-Up Store in Berkeley was a blast! We made some wonderful memories in Berkeley together for the "Genshin Impact 2023 Pop-Up Store Tour"! Share your experience with us! #GenshinImpact #TeyvatGoods
1:04

The Pop-Up Store in Berkeley was a blast! We made some wonderful memories in Berkeley together for the "Genshin Impact 2023 Pop-Up Store Tour"! Share your experience with us! #GenshinImpact #TeyvatGoods

Genshin Impact

384,569 Aufrufe • vor 2 Jahren

BigXthaPlug lookalikes pop up in the new adidas Adistar XLG 2.0 ad, a nod to the shoe’s resemblance to the Adistar Jellyfish 👀🔥
0:30

BigXthaPlug lookalikes pop up in the new adidas Adistar XLG 2.0 ad, a nod to the shoe’s resemblance to the Adistar Jellyfish 👀🔥

Nice Kicks

42,624 Aufrufe • vor 5 Monaten