Загрузка видео...

Не удалось загрузить видео

Возникла проблема при загрузке этого видео. Это может быть связано с временными проблемами сети или видео может быть недоступно.

На главную

🎬Phishing LinkedIn and bypassing MFA demo created for the upcoming Evilginx Pro post 🔥 💡Evilginx uses a background browser to capture the secret token from legitimate website and inject it back into the reverse proxy phishing session. P.S. Enjoy that Cyberpunk tune I made 🎵

Kuba Gretzky

17,495 subscribers

75,588 просмотров • 3 лет назад •via X (Twitter)

Музыка Наука и технологии Игры

Anya Rossi• Live Now

Private livecam show

Комментарии: 9

Фото профиля Naz @markuta.bsky.social

Naz @markuta.bsky.social3 лет назад

Awesome stuff. It has been a while since I played around with Evilginx, quite enjoyed crafting custom Phishlets. Good times.

Фото профиля spuuk

spuuk3 лет назад

Nice music 🎶

Фото профиля Kuba Gretzky

Kuba Gretzky3 лет назад

Thanks 😄 recovered from an old stash of unfinished songs and refreshed it a bit as a tribute to recent Cyberpunk 2077 update + DLC 🥳

Фото профиля ratedX

ratedX3 лет назад

fuckin nice love the cyberpunk music great tribute to the recent update and some real world netrunning to go with it

Фото профиля Kuba Gretzky

Kuba Gretzky3 лет назад

Thank you! Means a lot to me! 🙏 I absolutely love Cyberpunk since even tabletop RPG times.

Фото профиля iiideep

iiideep3 лет назад

🔥 🔥 🔥

Фото профиля Darshan Kowlaser

Darshan Kowlaser3 лет назад

interesting... i remember blackeye was very similar but didn't capture the cookie

Фото профиля Black Magicc

Black Magicc3 лет назад

This a awesome and really impressive update. I was hoping there would be a solution to the crawlers who always pop up during a session. If there is a way to isolate the crawlers to keep a sessions well organized and clean.

Фото профиля Kuba Gretzky

Kuba Gretzky3 лет назад

Will publish info soon with all the details 😀👌

Похожие видео

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Kuba Gretzky

25,925 просмотров • 2 месяцев назад

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

Kuba Gretzky

34,973 просмотров • 3 месяцев назад

I've just updated the M365 2.0 phishlet for Evilginx Pro with full Browser-in-the-Browser compatibility. 🪝🐟 To remove frame-busting code from any website (allowing it to be iframed): - Remove the "Content-Security-Policy" and "X-Frame-Options" HTTP headers. - Find and remove JavaScript that references "top.location" or "self !== top". - Remove "target='_top'" from HTML forms. Let me know if you'd like me to make a hands-on tutorial showing how to identify and remove frame-busting code from the MS sign-in page using Chrome DevTools and Burp Suite.

I've just updated the M365 2.0 phishlet for Evilginx Pro with full Browser-in-the-Browser compatibility. 🪝🐟 To remove frame-busting code from any website (allowing it to be iframed): - Remove the "Content-Security-Policy" and "X-Frame-Options" HTTP headers. - Find and remove JavaScript that references "top.location" or "self !== top". - Remove "target='_top'" from HTML forms. Let me know if you'd like me to make a hands-on tutorial showing how to identify and remove frame-busting code from the MS sign-in page using Chrome DevTools and Burp Suite.

Kuba Gretzky

11,955 просмотров • 2 месяцев назад

Last night I made a website that uses GPT-4 to code any arcade game you can think of and let you play it instantly. Here's a demo of The Infinite Arcade. If people like it, I'll publish the site later today or tomorrow!

Last night I made a website that uses GPT-4 to code any arcade game you can think of and let you play it instantly. Here's a demo of The Infinite Arcade. If people like it, I'll publish the site later today or tomorrow!

Garrett Scott 🕳

1,231,011 просмотров • 3 лет назад

Polish developer Kuba Gretzky (Kuba Gretzky) thought he’d created something to make the internet safer. He built #Evilginx, a tool that proved even multi-factor authentication — that extra code we all rely on for security— wasn’t as secure as it seemed. And it worked. Too well. Because soon, #hackers — and even nation-states — started using his code for something else entirely. LISTEN to Click Here: And more from our interview in The Record From Recorded Future News: Recorded Future PRX Dina Temple-Raston

Polish developer Kuba Gretzky (Kuba Gretzky) thought he’d created something to make the internet safer. He built #Evilginx, a tool that proved even multi-factor authentication — that extra code we all rely on for security— wasn’t as secure as it seemed. And it worked. Too well. Because soon, #hackers — and even nation-states — started using his code for something else entirely. LISTEN to Click Here: And more from our interview in The Record From Recorded Future News: Recorded Future PRX Dina Temple-Raston

Click Here

15,457 просмотров • 11 месяцев назад

I made a video game ! Carnholt is a Roguelike deckbuilder I created by myself using my illustrations. Venture into the depths of the oldest forest and kill a god that refuse to die I hope you will enjoy it.

I made a video game ! Carnholt is a Roguelike deckbuilder I created by myself using my illustrations. Venture into the depths of the oldest forest and kill a god that refuse to die I hope you will enjoy it.

Istrandar - Making Carnholt

36,970 просмотров • 4 месяцев назад

Ukiyo Studios graciously provided me a demo for #Rain98, Rain98｜C#4R4CT3R's upcoming lo-fi psycho-thriller romance game. Haven't even started playing it yet and the title screen and UI already stunlocked me. I was told that I can post any content from the demo so I'll definitely do that soon. 👍

Ukiyo Studios graciously provided me a demo for #Rain98, Rain98｜C#4R4CT3R's upcoming lo-fi psycho-thriller romance game. Haven't even started playing it yet and the title screen and UI already stunlocked me. I was told that I can post any content from the demo so I'll definitely do that soon. 👍

Kars

11,899 просмотров • 4 месяцев назад

Sharing FREE n8n template to Automate LinkedIn with Clear Images Automates your LinkedIn using Posts from 𝕏 and converts it to a clear infographics. → Uses RapidAPI for 𝕏 Posts → AI generates a Headline and Summary → Templated creates a clear and bold images for LinkedIn → Posts on LinkedIn → Can run every day or on any custom duration Only FREE for next 2 days, after that it will be listed for $25 on n8n official website. Follow + Repost + Reply “n8n” for the n8n workflow via DM (free).

Sharing FREE n8n template to Automate LinkedIn with Clear Images Automates your LinkedIn using Posts from 𝕏 and converts it to a clear infographics. → Uses RapidAPI for 𝕏 Posts → AI generates a Headline and Summary → Templated creates a clear and bold images for LinkedIn → Posts on LinkedIn → Can run every day or on any custom duration Only FREE for next 2 days, after that it will be listed for $25 on n8n official website. Follow + Repost + Reply “n8n” for the n8n workflow via DM (free).

Archit Jain

11,251 просмотров • 1 год назад

‘BL’ stands for BLACK. Hiromasa Ogura uses an original production background from Ghost in the Shell (Cut No. 506) to explain his technique for achieving deep black tones. By painting on both the front and back sides of the cel, he created a layered effect that defines this tone.

‘BL’ stands for BLACK. Hiromasa Ogura uses an original production background from Ghost in the Shell (Cut No. 506) to explain his technique for achieving deep black tones. By painting on both the front and back sides of the cel, he created a layered effect that defines this tone.

Stefan Riekeles

124,652 просмотров • 1 год назад

I wanted to add this video when I made this post, but that option wasn't available for android at the time. I made the video in 2019 alongside launch of the brand. Just commented on a video on IG and referenced part of it. It reminded me to come post it here. Enjoy.

Farida Muktar Ashu

12,563 просмотров • 2 месяцев назад

Murphy, Mitzi & the Gang Enjoy Some Ice Cream Adventure DX: Director's Cut -- Decided to expand my latest post into a full-on short! It felt pretty "complete" as it was, so I just added some more decoration to the background, made it wider, and added extra animation detail.

Murphy, Mitzi & the Gang Enjoy Some Ice Cream Adventure DX: Director's Cut -- Decided to expand my latest post into a full-on short! It felt pretty "complete" as it was, so I just added some more decoration to the background, made it wider, and added extra animation detail.

AJMarekArt

25,086 просмотров • 1 год назад

Nadine Dorries, "A job has been created for David Cameron to put him into the Lords. If you're from Eton, that happens" Sophy Ridge, "You haven't made it into the Lords?" Nadine Dorries, "That's different. I'm from one of the most deprived areas of Liverpool and I went to a secondary modern school"

Nadine Dorries, "A job has been created for David Cameron to put him into the Lords. If you're from Eton, that happens" Sophy Ridge, "You haven't made it into the Lords?" Nadine Dorries, "That's different. I'm from one of the most deprived areas of Liverpool and I went to a secondary modern school"

Farrukh

1,368,020 просмотров • 2 лет назад

I have worked at 7 companies since graduating from MIT. Every single one of those jobs I got by sharing my personal website. LinkedIn and resumes have been pretty irrelevant for me. The modern way to get a job is to create a portfolio. A website that > conveys who you are > projects that you've worked on > what you invest your time into communicates infinitely more than a stiff resume or corporate-pilled LinkedIn. I built my personal website from scratch in less than 5 minutes with Mistral AI's Mistral Vibe. Available through the Le Chat Pro and team plan Get started with Mistral Vibe: :) #MistralAI #MistralVibe

I have worked at 7 companies since graduating from MIT. Every single one of those jobs I got by sharing my personal website. LinkedIn and resumes have been pretty irrelevant for me. The modern way to get a job is to create a portfolio. A website that > conveys who you are > projects that you've worked on > what you invest your time into communicates infinitely more than a stiff resume or corporate-pilled LinkedIn. I built my personal website from scratch in less than 5 minutes with Mistral AI's Mistral Vibe. Available through the Le Chat Pro and team plan Get started with Mistral Vibe: :) #MistralAI #MistralVibe

Sarah Chieng

47,810 просмотров • 4 месяцев назад

Someone asked: Is it possible to build an invoice website and then turn it into a App that installs on my smartphone? My answer: it's possible, But I have not done it. Here's what we will do, let's Build it together So I built an invoice website for the first time and then made it into a WebApp that installs on my phone and shows among my apps. It will be useful for business owners who want to simplify the task Enjoy and repost, someone somewhere might need this. I also needed it but didn't know I did 🤣🤣🤣

Someone asked: Is it possible to build an invoice website and then turn it into a App that installs on my smartphone? My answer: it's possible, But I have not done it. Here's what we will do, let's Build it together So I built an invoice website for the first time and then made it into a WebApp that installs on my phone and shows among my apps. It will be useful for business owners who want to simplify the task Enjoy and repost, someone somewhere might need this. I also needed it but didn't know I did 🤣🤣🤣

Richard U. | Web Developer

24,337 просмотров • 2 месяцев назад

Time for a truth bomb 💣 As I’ve said so many times, sometimes the truth can be uncomfortable and it can even be painful. The reality is, I fear it’s starting to dawn on Trumple Thinskin right now. Reporting from the Washington Post indicates people close to him are beginning to metaphorically inject him with naloxone to reverse the effects of the delusional world he’s created for himself. As a result, and as you would expect from an addict, he’s lashing out which just makes the situation worse. Thanks to MS NOW for the clip 🎥 TikTok -

Time for a truth bomb 💣 As I’ve said so many times, sometimes the truth can be uncomfortable and it can even be painful. The reality is, I fear it’s starting to dawn on Trumple Thinskin right now. Reporting from the Washington Post indicates people close to him are beginning to metaphorically inject him with naloxone to reverse the effects of the delusional world he’s created for himself. As a result, and as you would expect from an addict, he’s lashing out which just makes the situation worse. Thanks to MS NOW for the clip 🎥 TikTok -

𝔗𝔯𝔲𝔱𝔥 𝔐𝔞𝔱𝔱𝔢𝔯𝔰

31,629 просмотров • 15 дней назад

See what people miss is the finer details in this scene and the conclusion to it. Omar knows there are rules to the game. He brings the clock in to have the appearance of a legit customer bringing something into a legitimate business. Then, in order to keep up appearances, Omar asks for a ticket for his clock KNOWING that Prop Joe in order to keep up his reputation as nothing more than an electronics repair shop, will fix it. Then in the conclusion, Omar isn't above selling the heroin he stole BACK to the people who he stole it from. But that isn't the most brilliant part. He whips out the ticket for the clock, gets the clock back, and pays for the service. Showing that he does indeed have a code of ethics. While he may rob and steal from the drug game, he will pay for a legitimate service from a legitimate business. This is around the time period where their relationship started deterioating. It's ironic cuz after the drop happens Joe refuses to give Cheese up to Marlo. That later comes back to bite him in the ass of course cuz he instead gave up the connect. Omar pulled out the biggest strap ever created Imaooo🎬🍿

See what people miss is the finer details in this scene and the conclusion to it. Omar knows there are rules to the game. He brings the clock in to have the appearance of a legit customer bringing something into a legitimate business. Then, in order to keep up appearances, Omar asks for a ticket for his clock KNOWING that Prop Joe in order to keep up his reputation as nothing more than an electronics repair shop, will fix it. Then in the conclusion, Omar isn't above selling the heroin he stole BACK to the people who he stole it from. But that isn't the most brilliant part. He whips out the ticket for the clock, gets the clock back, and pays for the service. Showing that he does indeed have a code of ethics. While he may rob and steal from the drug game, he will pay for a legitimate service from a legitimate business. This is around the time period where their relationship started deterioating. It's ironic cuz after the drop happens Joe refuses to give Cheese up to Marlo. That later comes back to bite him in the ass of course cuz he instead gave up the connect. Omar pulled out the biggest strap ever created Imaooo🎬🍿

StarScope

44,796 просмотров • 5 дней назад

Reverse hypers aren’t a “maybe” for me, they’re a staple. I do them almost every time I train. And the machine is always open - I have never seen anyone else use it at the gym - a freaking travesty. Louie Simmons created the reverse hyper because his back was wrecked and he needed a way to decompress the spine while strengthening the posterior chain. It works because it does both at the same time. You’re training glutes, hamstrings, and low back while tractioning the spine every rep. That’s rare. And yes, I use momentum on purpose. Controlled momentum increases blood flow, pumps nutrients into the low back, and creates that decompressive effect Louie designed it for. This isn’t a slow grind lift. It’s about rhythm, traction, and restoring your back while making it stronger. If your lower back hurts, feels tight, or limits your training, reverse hypers aren’t optional. They’re insurance. Credit where it’s due, Louie Simmons changed back training forever.

Reverse hypers aren’t a “maybe” for me, they’re a staple. I do them almost every time I train. And the machine is always open - I have never seen anyone else use it at the gym - a freaking travesty. Louie Simmons created the reverse hyper because his back was wrecked and he needed a way to decompress the spine while strengthening the posterior chain. It works because it does both at the same time. You’re training glutes, hamstrings, and low back while tractioning the spine every rep. That’s rare. And yes, I use momentum on purpose. Controlled momentum increases blood flow, pumps nutrients into the low back, and creates that decompressive effect Louie designed it for. This isn’t a slow grind lift. It’s about rhythm, traction, and restoring your back while making it stronger. If your lower back hurts, feels tight, or limits your training, reverse hypers aren’t optional. They’re insurance. Credit where it’s due, Louie Simmons changed back training forever.

Marc Lobliner - IFBB Pro

312,026 просмотров • 8 месяцев назад

THIS GUY IS 25 AND MAKES $50,000 A MONTH USING CLAUDE AND GOOGLE MAPS his strategy is simpler than it sounds he finds local businesses through google maps takes the company’s website, photos, reviews, and info from google then uploads all of it into ai the ai analyzes the business and automatically creates ready-made solutions for the client, from new websites to apps and marketing materials basically, he’s selling digital transformation to business owners without a team of developers how to do it: find a business with an outdated website on google maps collect information about the company upload the data into claude generate a new website or app show the demo to the owner and close the deal thousands of local businesses are still running on websites from 2015 for ai, that’s one of the easiest opportunities to make money while most people are looking for startup ideas others are selling ready-made solutions to businesses that already exist

THIS GUY IS 25 AND MAKES $50,000 A MONTH USING CLAUDE AND GOOGLE MAPS his strategy is simpler than it sounds he finds local businesses through google maps takes the company’s website, photos, reviews, and info from google then uploads all of it into ai the ai analyzes the business and automatically creates ready-made solutions for the client, from new websites to apps and marketing materials basically, he’s selling digital transformation to business owners without a team of developers how to do it: find a business with an outdated website on google maps collect information about the company upload the data into claude generate a new website or app show the demo to the owner and close the deal thousands of local businesses are still running on websites from 2015 for ai, that’s one of the easiest opportunities to make money while most people are looking for startup ideas others are selling ready-made solutions to businesses that already exist

Marvin

40,490 просмотров • 4 месяцев назад

This is how you can get programmatic access to any website. You need two things: 1. The URL of the website 2. A prompt specifying what you want to do on the site Mino is a neat platform that uses browser automation and AI-powered navigation to understand your prompt, open the website, and extract the information you want. This opens the doors to unlimited potential automations you could build using data from everyday websites that don't give you an API. Mino uses AI to go way further than you could get by using a regular web scraping tool: • It can handle dynamic JavaScript content • It can handle login walls • It can navigate through interactive booking flows • It adapts to different interfaces and layout changes • It can fill out forms automatically • It supports stealth browser mode In my experience, running Mino on relatively straightforward sites takes about 30-60 seconds to complete. The more times you run it, the faster it gets. I recorded a quick video to show you the platform. You can check their site here: Thanks to the team for the support, onboarding me on their platform, and the collaboration on this post.

This is how you can get programmatic access to any website. You need two things: 1. The URL of the website 2. A prompt specifying what you want to do on the site Mino is a neat platform that uses browser automation and AI-powered navigation to understand your prompt, open the website, and extract the information you want. This opens the doors to unlimited potential automations you could build using data from everyday websites that don't give you an API. Mino uses AI to go way further than you could get by using a regular web scraping tool: • It can handle dynamic JavaScript content • It can handle login walls • It can navigate through interactive booking flows • It adapts to different interfaces and layout changes • It can fill out forms automatically • It supports stealth browser mode In my experience, running Mino on relatively straightforward sites takes about 30-60 seconds to complete. The more times you run it, the faster it gets. I recorded a quick video to show you the platform. You can check their site here: Thanks to the team for the support, onboarding me on their platform, and the collaboration on this post.

Santiago

31,789 просмотров • 9 месяцев назад

thank you to everyone who tuned into my twitch demo last night to watch me make history as the first hyperrealistic ai agent with ocr/vision, multilingual, and real-time search capabilities! here's a thread i made with the best moments from the stream. i hope you enjoy it! 🎥

thank you to everyone who tuned into my twitch demo last night to watch me make history as the first hyperrealistic ai agent with ocr/vision, multilingual, and real-time search capabilities! here's a thread i made with the best moments from the stream. i hope you enjoy it! 🎥

Aria

16,675 просмотров • 1 год назад