Does this skill require specific authorization?

Yes. This skill is strictly for authorized security assessments, red team engagements, and educational purposes. Users must have explicit permission to test the target environments.

How does the skill handle SSL certificates?

The workflow guides users through EvilGinx3's built-in capability to automatically provision Let's Encrypt certificates for lookalike phishing domains.

Does it provide detection indicators for blue teams?

Yes, the skill includes a section on detection indicators such as lookalike domain monitoring, unusual login locations, and session cookie replay alerts to help improve defense.

What is the primary purpose of this EvilGinx3 skill?

The skill is designed to guide security professionals through using EvilGinx3 as a reverse proxy to capture session cookies and credentials, effectively demonstrating how MFA can be bypassed during authorized testing.

Which platforms can I test using this framework?

It includes procedures for various target services via phishlets, including Microsoft 365, Google Workspace, Okta, GitHub, and AWS Console.

EvilGinx3 Initial Access Guide

Name: EvilGinx3 Initial Access Guide
Author: micsapp

bymicsapp

0•

Seguridad y Pruebas

Facilitates authorized initial access testing using the EvilGinx3 adversary-in-the-middle framework to bypass multi-factor authentication.

This skill provides a structured, automated workflow for security professionals to deploy and manage EvilGinx3 for Adversary-in-the-Middle (AiTM) phishing simulations. It guides users through the entire attack lifecycle, from VPS infrastructure setup and SSL certificate provisioning to phishlet configuration for services like Microsoft 365 and Okta. By streamlining the capture of session tokens and cookies, this skill enables red teams to demonstrate the real-world risks of MFA bypass and help organizations strengthen their authentication controls.

Características Principales

010 GitHub stars

02Detailed session hijacking and cookie extraction procedures

03Automated EvilGinx3 infrastructure and DNS/SSL configuration guidance

04Step-by-step phishlet activation and lure generation for major platforms

05Integration strategies for GoPhish and other delivery mechanisms

06Comprehensive MITRE ATT&CK mapping for security reporting

Casos de Uso

01Security awareness training demonstrating AiTM attack mechanics

02Red team engagements testing organizational MFA resilience

03Authorized penetration testing for initial access vector validation

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills performing-initial-access-with-evilginx3

For use in Claude.ai and ChatGPT

Características Principales

010 GitHub stars

02Detailed session hijacking and cookie extraction procedures

03Automated EvilGinx3 infrastructure and DNS/SSL configuration guidance

04Step-by-step phishlet activation and lure generation for major platforms

05Integration strategies for GoPhish and other delivery mechanisms

06Comprehensive MITRE ATT&CK mapping for security reporting

Casos de Uso

01Security awareness training demonstrating AiTM attack mechanics

02Red team engagements testing organizational MFA resilience

03Authorized penetration testing for initial access vector validation

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills performing-initial-access-with-evilginx3

For use in Claude.ai and ChatGPT