thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

Evilginx

An adversary-in-the-middle phishing framework that proxies real login pages to capture credentials and session cookies, bypassing many MFA methods.

Definition

Evilginx sits between the victim and the legitimate site as a reverse proxy, so the user completes real MFA while the tool captures the authenticated session token. The attacker replays the cookie to hijack the session. Phishing-resistant MFA such as FIDO2/passkeys defeats this because authentication is bound to the origin.

Example

A red team uses an Evilginx phishlet for Microsoft 365 to steal a session cookie despite push MFA.

Exam tip

Adversary-in-the-middle phishing defeats OTP and push MFA, not FIDO2/WebAuthn.

Related terms