ErrLookup › kgretzky/evilginx2
kgretzky/evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication · Go · 21 source files
Analyzed at 4c0988a1d9 on 2026-09-05. 112 documented errors.
| Code / Message | Type | Severity | Tags |
|---|---|---|---|
| sub_filters: missing `triggers_on` field | validation | error | phishlet, sub-filters, config-validation |
| array of parameters not found | exception | error | json, file-import, dead-code |
| force_post: missing or empty `path` field | validation | error | phishlet, config-validation, force-post |
| missing `credentials` section | validation | error | phishlet, config-validation, evilginx |
| intercept: `domain` field cannot be empty | validation | error | phishlet, configuration, yaml-validation |
| failed to get TLS certificate for | exception | error | tls, network, certificate |
| invalid command line string | validation | error | parsing, command-line, quoting |
| session already exists | exception | warning | go, database, buntdb, duplicate-key, session-management |
| missing custom parameter values during initalization | validation | error | phishlet, configuration, missing-parameter, template |
| script not found | exception | error | phishlet, js-inject, lookup-miss |
| lure for path ' ' not found | exception | warning | config, lure, not-found, go |
| proxy_hosts: list cannot be empty | validation | error | phishlet, proxy-hosts, config-validation |
| phishing hostname not found | exception | warning | proxy, hostname, mitm, phishlet |
| credentials | validation | error | phishlet, regex, config, credentials |
| js_inject | exception | error | phishlet, js-inject, regexp |
| edit | exception | error | go, cli, persistence |
| enabling phishlet ' ' requires its hostname to be set up | validation | error | configuration, phishlet, hostname |
| sub_filters: missing `orig_sub` field | validation | error | phishlet, sub-filters, config-validation |
| session not found | exception | error | go, database, buntdb, not-found, session-management |
| credentials: missing `username` section | validation | error | phishlet, config-validation, credentials |
| command not found | exception | info | cli, command-not-found, help |
| proxy_hosts: missing `domain` field | validation | error | phishlet, proxy-hosts, config-validation |
| proxy_hosts: missing `orig_sub` field | validation | error | phishlet, proxy-hosts, config-validation |
| private key generation failed | exception | critical | crypto, tls, rng, certificate |
| login: `domain` must contain a value of one of the… | validation | error | configuration, phishlet, validation, hostname |
| this phishlet is incompatible with current version of… | validation | error | phishlet, configuration, version-compatibility, migration |
| auth_tokens: 'search' not found for body auth token | validation | error | phishlet, config, yaml, validation |
| force_post: missing search `key` field | exception | error | phishlet, config-validation, force-post |
| proxy_hosts: missing `phish_sub` field | validation | error | phishlet, proxy-hosts, config-validation |
| you can only use time duration types in following order… | validation | error | parsing, duration, validation |
| credentials: missing `password` section | validation | error | phishlet, config-validation, credentials |
| phishing urls and phishing parameters count do not match | validation | error | data-integrity, export, invariants |
| force_post: unknown type - only 'post' is currently… | validation | error | phishlet, config-validation, force-post |
| failed to list certificates in directory | exception | error | filesystem, certificate, configuration |
| session ID not found | exception | error | go, database, buntdb, not-found, session-management |
| auth_tokens: 'path' not found for body auth token | validation | error | phishlet, configuration, auth-tokens, yaml-validation |
| please disable the proxy before making changes to its… | exception | error | cli, proxy, state-conflict |
| invalid syntax | validation | error | cli, terminal, syntax |
| private key is corrupted | exception | critical | crypto, tls, certificate, corruption |
| intercept: missing `path` field | validation | error | phishlet, configuration, yaml-validation |
| set custom parameters for the child phishlet using format… | validation | error | cli, phishlet, syntax-error |
| js_inject: missing `script` field | validation | error | phishlet, config-validation, js-inject, missing-field |
| edit: lure hostname must end with the base domain | validation | error | go, cli, validation, dns |
| intercept: `path` invalid regular expression | validation | error | phishlet, configuration, regex, yaml-validation |
| missing `login` section | validation | error | phishlet, config-validation, login-url |
| edit: invalid hostname | validation | error | go, cli, validation, hostname |
| js_inject: missing `trigger_domains` field | validation | error | phishlet, config-validation, js-inject, missing-field |
| auth_tokens: 'keys' not found for cookie auth token | validation | error | phishlet, configuration, auth-tokens, yaml-validation |
| intercept: missing `domain` field | validation | error | phishlet, config-validation, intercept, missing-field |
| auth_tokens: invalid token type | validation | error | phishlet, configuration, auth-tokens, yaml-validation |
| auth_tokens: 'name' not found for body auth token | validation | error | phishlet, configuration, auth-tokens, yaml-validation |
| invalid ip address | validation | error | network, validation, ip-address |
| incorrect number of arguments | validation | warning | cli, lures, syntax-error |
| phishlet ' ' is a template - you have to 'create' child… | validation | error | configuration, phishlet, template |
| edit: redirect url must be absolute | validation | error | cli, url-validation, evilginx2 |
| force_post: missing force `value` field | exception | error | phishlet, config-validation, force-post |
| export format can only be 'text', 'csv' or 'json' | validation | error | cli, validation, export-format |
| pause | exception | error | |
| phishlet ' ' already exists | validation | error | configuration, phishlet, duplicate |
| intercept: missing `http_status` field | validation | error | phishlet, configuration, yaml-validation |
| force_post: missing force `key` field | exception | error | phishlet, config-validation, force-post |
| index out of bounds | validation | error | config, lure, index-out-of-range, go |
| auth_tokens: 'domain' not found for body auth token | validation | error | phishlet, configuration, auth-tokens, yaml-validation |
| sub_filters: missing `replace` field | validation | error | phishlet, config-validation, sub-filters, missing-field |
| force_post: missing search `search` field | exception | error | phishlet, config-validation, force-post, regex |
| invalid version format (must be X.Y.Z) | validation | error | phishlet, version-parsing, validation |
| missing `auth_tokens` section | validation | error | phishlet, configuration, schema-validation, missing-section |
| no hostname set for phishlet | exception | error | phishlet, configuration, hostname |
| get_url | exception | error | |
| sub_filters: missing `domain` field | validation | error | phishlet, config-validation, sub-filters, missing-field |
| invalid proxy type selected | validation | error | proxy, configuration, validation |
| auth_tokens: 'domain' not found for cookie auth token | validation | error | phishlet, configuration, auth-tokens, yaml-validation |
| edit: redirector directory does not exist | validation | error | cli, filesystem, evilginx2 |
| force_post: missing or empty `force` field | exception | error | phishlet, config-validation, force-post |
| phishlet ' ' can't be deleted - you can only delete child… | validation | error | config, phishlet, go |
| this phishlet is incompatible with current version of… | validation | error | phishlet, configuration, version-compatibility, migration |
| js_inject: missing `trigger_paths` field | validation | error | phishlet, config-validation, js-inject, missing-field |
| credentials: missing username `key` field | validation | error | phishlet, config, credentials, validation |
| time duration value needs to start with a number | validation | error | parsing, duration, validation |
| to set custom parameters for the phishing url, use format… | validation | error | |
| sub_filters: missing `mimes` field | validation | error | phishlet, config-validation, sub-filters, missing-field |
| invalid api key | exception | error | gophish, auth, api-key, http-401 |
| missing `proxy_hosts` section | validation | error | phishlet, configuration, schema-validation, missing-section |
| id not found | exception | error | cli, sessions, lookup |
| login: `domain` field cannot be empty | validation | error | configuration, phishlet, validation, hostname |
| delete | exception | error | cli, argument-validation, strconv, evilginx2 |
| failed to list certificate directory | exception | error | filesystem, certificate, permissions |
| auth_tokens: 'domain' not found for http auth token | validation | error | phishlet, config, yaml, validation |
| credentials: missing username `search` field | validation | error | phishlet, config, credentials, validation |
| get-url: no import path specified | validation | error | |
| auth_tokens: 'header' not found for http auth token | validation | error | phishlet, config, yaml, validation |
| proxy address can't be empty | validation | error | proxy, configuration, validation |
| login: missing `domain` field | validation | error | configuration, phishlet, yaml, missing-field |
| unknown time duration type | validation | error | parsing, duration, validation |
| api key is not set | validation | error | gophish, auth, api-key, missing-setting |
| admin url is not set | validation | error | gophish, config, missing-setting |
| credentials: missing custom `search` field | validation | error | configuration, phishlet, yaml, missing-field |
| sub_filters: missing `search` field | validation | error | phishlet, config-validation, sub-filters, missing-field |
| credentials: missing password `key` field | validation | error | phishlet, config, credentials, validation |
| edit: image url must be absolute | validation | error | cli, url-validation, og-metadata, evilginx2 |