252 Commits

Author SHA1 Message Date
Kuba Gretzky
ff902ee59c EditThisCookie extension is deprecated - added changes to support StorageAce extension for importing cookies 2025-01-21 16:16:10 +01:00
Kuba Gretzky
9e32484719 fixed: redirection on page reload after session tokens are captured 2024-04-24 21:24:22 +02:00
Kuba Gretzky
f0c8b028a5 added cloudflare turnstile redirector demo 2024-04-11 14:45:18 +02:00
Kuba Gretzky
55579600ca fixed gophish integration links v3.3.0 2024-04-02 15:20:57 +02:00
Kuba Gretzky
2998e871f3 updated readme with gophish integration 2024-04-02 15:19:33 +02:00
Kuba Gretzky
f4d5113764 version 3.3.0 bump 2024-04-02 14:17:29 +02:00
Kuba Gretzky
d06e1035b4 extra fix for infinite redirection loop 2024-04-02 14:16:42 +02:00
Kuba Gretzky
e3bef9433c credentials can now be harvested from intercepted requests 2024-04-02 00:27:42 +02:00
Kuba Gretzky
f346c42048 added support for more tlds 2024-04-01 21:28:17 +02:00
Kuba Gretzky
b570e846ce fixed: infinite redirection loop when lure url was the same as phishlet login path 2024-04-01 15:38:43 +02:00
Kuba Gretzky
e6b421af6b blacklist will now ignore 127.0.0.1 ip address 2024-04-01 14:06:23 +02:00
Kuba Gretzky
68d45d0fdb gophish integration 2024-04-01 13:29:29 +02:00
Kuba Gretzky
edadd52339 Merge branch 'master' of https://github.com/kgretzky/evilginx2 2024-03-23 14:42:05 +01:00
Kuba Gretzky
622d854d21 updated changelog 2024-03-23 14:41:53 +01:00
Kuba Gretzky
c4a5dcb2e6
Merge pull request #1023 from yudasm/dev
added support for force_post for json parameters
2024-03-22 11:45:09 +01:00
judesmirnov@gmail.com
7d319d73c4 added support for force_post for json parameters 2024-03-05 08:28:53 +02:00
Kuba Gretzky
1b9cb590fe added support for retrieving correct origin ip for requests coming from behind a proxy (nginx/apache2/cloudflare/azure) 2024-03-01 16:03:28 +01:00
Kuba Gretzky
e7a68662a0 code and mod cleanups 2024-03-01 15:48:42 +01:00
Kuba Gretzky
3b0f5c9971 added support to use custom tls certificates, updated certmagic 2024-03-01 15:42:19 +01:00
Kuba Gretzky
d8f7d44e14 fixed: unauthorized requests now properly handled for proxy_hosts without session set to true, preventing proxy detection by scanners 2024-02-28 12:02:49 +01:00
Kuba Gretzky
e1f3b838be fixed: unauth_url can now be set to empty string 2023-11-02 14:46:06 +01:00
Kuba Gretzky
04ca6a39e7 added support for __host- and __secure- exported cookie names 2023-09-29 00:51:26 +02:00
Kuba Gretzky
a8d2cd3fd0 blocked requests redirected with javascript v3.2.0 2023-08-24 11:56:32 +02:00
Kuba Gretzky
7a959bb807 changelog and version bump 2023-08-24 11:25:29 +02:00
Kuba Gretzky
d6ddf55450 removed caching, improved js injection 2023-08-18 14:11:30 +02:00
Kuba Gretzky
2f28e36dfd added ability to pause lures for specific time duration 2023-08-17 20:54:33 +02:00
Kuba Gretzky
b784e19b2a override global unauth_url per phishlet 2023-08-16 16:17:45 +02:00
Kuba Gretzky
535eeba80f added redirect_url in phishlets` 2023-08-01 00:21:30 +02:00
Kuba Gretzky
f2c6fa8f8c renamed redirect_url to unauth_url in global config 2023-07-28 14:36:07 +02:00
Kuba Gretzky
b201400f1a added dynamic redirects for single-page applications 2023-07-28 12:16:48 +02:00
Kuba Gretzky
55aa7b712f added phishlet ability to intercept http requests 2023-07-27 16:15:32 +02:00
Kuba Gretzky
c8b9f24c9c fixed: post form data is now only parsed only for x-www-form-urlencoded mime type requests 2023-07-26 19:50:56 +02:00
Kuba Gretzky
c1480b778c fixed: redirection is now injected only on valid html pages 2023-07-26 19:48:49 +02:00
Kuba Gretzky
19d3c0f8c6 fixed http status response for javascript redirects 2023-07-26 19:22:49 +02:00
Kuba Gretzky
fa3e25b86b bumping the banner version 2023-07-13 14:48:20 +02:00
Kuba Gretzky
a49523a9c4 v3.1 release v3.1.0 2023-07-11 10:03:54 +02:00
Kuba Gretzky
1ac3d10271 v3.0 release v3.0.0 2023-05-10 11:04:32 +02:00
Kuba Gretzky
511860ca99
Merge pull request #571 from michaelmagyar/token-capture-fix
fixed token capture logic for tokens with expiry set to 0
2021-02-08 23:17:52 +01:00
Michael Magyar
b6db209a6b fixed token capture logic to still capture session tokens with expiry set to 0 2021-02-08 14:23:46 -05:00
Kuba Gretzky
63eddbb1fb merge fix 2021-02-02 19:56:39 +01:00
Kuba Gretzky
b4883fe54e
updated links and thumbnails to Luke Turvey's videos 2021-02-02 16:00:24 +01:00
Kuba Gretzky
4ce3bbf560 removed some obsolete code 2021-02-02 14:13:48 +01:00
Kuba Gretzky
65b0084693 2.4.2: added support for obsolete date/time formats for cookie expiry time, not storing expired cookies 2021-02-02 14:13:48 +01:00
Kuba Gretzky
09e78a96b4 small tweak to handle Access-Control-Allow-Origin header 2021-02-02 14:13:48 +01:00
Kuba Gretzky
5fc43f4be9 fix: proper hostname substitution in Access-Control-Allow-Origin 2021-02-02 14:13:48 +01:00
Kuba Gretzky
e093efacb8 fixed git clone command 2021-02-02 14:13:48 +01:00
Kuba Gretzky
ef2e0b371d typo fix 2021-02-02 14:13:48 +01:00
Kuba Gretzky
9ac22ed022 links fix 2021-02-02 14:13:48 +01:00
Kuba Gretzky
6e66a19171 2.4.0 "Gone Phishing" update 2021-02-02 14:13:48 +01:00
Anonymoushawk
cdb21aaac3 Add files via upload 2021-02-02 14:13:48 +01:00