Giters

hash3liZer / evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Compiled releases / Docker

JamesCullum opened this issue · comments

commented

PLEASE READ THE POSTING GUIDELINES AND ANSWER THE QUESTION BEFORE POSTING, OTHERWISE ISSUE WILL BE CLOSED AND MARKED AS INVALID

  • I hereby declare the following issue is a [tool specific question/bug report] and it is NOT a help request about creating a phishlet.
  • I am fully aware that this is not a customer support portal, I can't demand answers and I'm aware I am using a free tool.
  • I am not going to use Evilginx to hax my girlfriend's account or use it for any other illegal purpose.
  • I am not trying to set up a domain on FreeNOM (also read the sentence above again).
  • I am not a robot.
    (Sorry, if you are an adult and a professional and you had to read this.)

Please type in "I CONFIRM" below if you confirm the sentences above or otherwise make some funny remark:

I CONFIRM

Thanks!

As the releases of the official one are not updated (and all issues were removed), and this fork appears to be the new maintained version, we should as well create a build pipeline to provide binaries or at least an up-to-date Docker image.

All of this can be set up once and will run automatically and for free, so that people can use it easier.

commented

For the docker image, we could use an existing Docker Hub pipeline.
Created PR here: heywoodlh/dockerfiles#1

commented

@JamesCullum Sure, I'd like that too. I am currently working on another project. As soon as I am done with that, I'll set it up as well.

commented

The Dockerfile has been merged and we can refer to that Docker build: https://hub.docker.com/r/heywoodlh/evilginx2

What about a CI/CD pipeline for testing and releases?
This would make future maintenance easier and prevents issues like the current one, where the current version doesn't match.

If you can add me as a contributor, I can set up the pipelines on TravisCI similar to what I've done with https://github.com/FIDO-Tools/fido2-library

commented

Can you pull a request if possible or if you can get me on email?

commented

@hash3liZer Sent you another email two days ago - the tests are ready to go and I can set up the pipeline.
However I currently do not have permission to install apps or add releases.
Could you change my permission, so that I can set up Travis?

commented

Check your email now.

commented

Thanks, received and accepted now.
However the permissions are still insufficient to install apps.

Error message

EDIT: Looks like this requires admin permission.
However if you install it once, it should allow me to configure it.

commented

@hash3liZer Can you install Travis, so that I can configure it?

commented

Due to no feedback, I've decided to use Github Actions, as it requires no app installation.
The only thing missing now is adding one secret, that I've sent via email.

commented

@JamesCullum Hi, Sorry to have you waited. I was in hospital for some serious health issues. Can you tell me which Secret?

commented

Hey @hash3liZer - no worries, hope you're feeling better now :)
I've sent you an email with a secret called "REDDITPASSWORD" and the password to the test account.

commented

Great - test pipeline works now and the building one as well 👍