warhorse/docker-evilginx2

Evilginx2 - Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Usage

Here are some example snippets to help you get started creating a container.

docker

docker create \
  --name=evilginx2 \
  -e TZ=Europe/London \
  -p 443:443 \
  -p 80:80 \
  -v <path to data>:/config \
  -v <path to data>:/phishlets 
  --restart unless-stopped \
  warhorse/evilginx2

docker-compose

Compatible with docker-compose v2 schemas.

---
version: "2"
services:
  evilginx2:
    image: warhorse/evilginx2
    container_name: evilginx2
    environment:
      - TZ=Europe/London
    volumes:
      - <path to data>:/config
      - <path to data>:/phishlets
    ports:
      - 443:443
      - 80:80
    restart: unless-stopped

Parameters

Container images are configured using parameters passed at runtime (such as those above). These parameters are separated by a colon and indicate <external>:<internal> respectively. For example, -p 8080:80 would expose port 80 from inside the container to be accessible from the host's IP on port 8080 outside the container.

Parameter	Function
-p 80	The port for HTTP traffic
-p 443	The port for HTTPS traffic
-e TZ=Europe/London	Specify a timezone to use EG Europe/London
-v /config	evilginx2 configs
-v /phishlets	evilginx2 phishlets

 

Application Setup

Access the webui at <your-ip>:7443, for more information check out evilginx2.

Support Info

• Shell access whilst the container is running: docker exec -it evilginx2 /bin/bash
• To monitor the logs of the container in realtime: docker logs -f evilginx2

Building locally

If you want to make local modifications to these images for development purposes or just to customize the logic:

git clone https://github.com/warhorse/docker-evilginx2.git
cd docker-evilginx2
docker build \
  --no-cache \
  --pull \
  -t warhorse/evilginx2:latest .

Versions

• 02.13.20: - First Push