
Learn a systematic process of creating, debugging, and programming Evilginx phishlets from scratch. Learn to analyze authentication flows, bypass MFA protections, troubleshoot errors, and deploy advanced reverse-proxy phishing techniques.
Syllabus
- Introduction to Modern Phishing: Attack Methodologies & Understanding Evilginx, EvilProxy & V3B Kit Demos
- Evilginx Phishlets Documentation Review
- Basics of Programming in YAML: (YAML Ain’t Markup Language™)
- Infrastructure & Tools Setup
- Application Network Traffic Analysis 101: Beginner to Expert w/ Developer Tools
- User Authentication: Understanding Cookies, Auth Tokens, Session Management, Token Architecture, and Implementation Methods
- Web Authentication & Reverse Engineering: Methodologies, Tools and Traffic Inspection Techniques with Hussain
- What We’ve Learned So Far!
- Building a Custom Phishlet #1 – Hands-On Tutorial for Building and Deploying a Custom Phishlet
- Comparing Authentication System Security: Ranking Complexity from Standard Web Logins to Enterprise-Grade Defenses (L1–L4)
- Phishlet Lab #2 (Part A): Network Traffic Interception, Session Token Extraction, and Phishlet Architecture Development
- Phishlet Lab #2 (Part B): Configuring Subfilter Logic, Authentication Flow Validation, and Deployment Optimization
- Debugging and Troubleshoot Phishlets
- Phishing Domain Mastery for Email Deliverability: Advanced Selection, Filtering, and Inbox Optimization
- Defending Against Modern Reverse-Proxy Phishing – Mitigation Strategies for Modern Attacks
- Evilginx Pro: CAPTCHAs, Puppeteer, EvilPuppet, Advanced Features, Access Guidelines, and Other Considerations
- TMUX Tutorial: What It Is, How to Install and Use It with Evilginx
- (Requested) Anonymous Infrastructure & VPN Integration: Secure Deployment and Off-Shore Hosting
- Bonus Resources – Custom Phishlets, Tool Kits, Email Templates, Course Files, Materials, Streams & Webinars
- Conclusion
Security Education
OffSec
iNE
Antisyphon
EC-Council
Applied Network Defense
Kaspersky
Sektor7
CompTIA
TCM Security
BlackHat
13Cubed
Dark Vortex
Enciphers
Forty North
Cyber warfare Labs
Maltrak
Scorpio Software
Security Onion
Zero Point Security
SentinelOne
Altered Security
SpecterOps
Pentester Academy
CQURE
PluralSight
StationX
Cybr
موسسههای دیگر