bakkerjan / evilginx3 Goto Github PK

Google Phishlet Available?

Issue with evilginx prompting for MFA. Evilginx is able to intercept user name and password but after logging in does not prompt for MFA from the account. MFA is enabled on the on the account

Okay, I used your phishlet to test out Evilginx with my account. However, after I input my email account, it responded with this: We're unable to complete your request
invalid_request: The provided value for the input parameter 'redirect_uri' is not valid. The expected value is a URI which matches a redirect URI registered for this client application.
Below are the pictures.


Can you help me out

Hi,
after settings up Evilginx 3.2.0 with your M365 phishlet and configuring everything the following happens: after logging in to the URL (login.domain.my/randomtoken) I am prompted for a login, then a password. Both are logged. After that the browser is forwarded to device.login.domain.my and times out. I am not prompted for an MFA, I just get a browser message because of the timeout. I already created a DNS entry for device.login.domain.my, but this does not help. Any suggestions?
Thanks!

Hello Jan,

I tried your tutorial using this o365.yaml, however when I open the phishinglink o365 starts to auto login. Then nothing happens and a regular login screen appears. When I tried to put in some credentials there I get the following error page: invalid_request: The provided value for the input parameter 'redirect_uri' is not valid. The expected value is a URI which matches a redirect URI registered for this client application.

In Evilginx I get the following warning:
[war] session cookie not found:

I added some screenshots to clarify. What could be the issue?

it's not working with godaddy office365 webmail
here's the error
: 2023/06/26 11:46:40 [133] WARN: Cannot handshake client www.office.com EOF
2023/06/26 11:46:40 [132] WARN: Cannot handshake client www.office.com EOF
2023/06/26 11:46:49 [135] WARN: Cannot handshake client www.office.com EOF
2023/06/26 11:46:49 [134] WARN: Cannot handshake client www.office.com EOF
2023/06/26 11:48:22 [137] WARN: Cannot handshake client login.microsoftonline.com tls: client requested unsupported application protocols ([http/0.9 http/1.0 spdy/1 spdy/2 spdy/3 h2c hq])
2023/06/26 11:48:24 [136] WARN: Cannot handshake client login.microsoftonline.com EOF
2023/06/26 11:48:26 [138] WARN: Cannot handshake client login.microsoftonline.com tls: client requested unsupported application protocols ([hq h2c spdy/3 spdy/2 spdy/1 http/1.0 http/0.9])
2023/06/26 11:48:28 [139] WARN: Cannot handshake client login.microsoftonline.com EOF
2023/06/26 11:48:36 [140] WARN: Cannot handshake client login.microsoftonline.com EOF
2023/06/26 11:48:36 [141] WARN: Cannot handshake client login.microsoftonline.com EOF
2023/06/26 11:48:39 [142] WARN: Cannot handshake client login.microsoftonline.com EOF
2023/06/26 11:48:39 [143] WARN: Cannot handshake client login.microsoftonline.com EOF