• Thank You33

Introduction

• Intro1

• Evolution of Phishing2

• MFA & Web Security

• Stealing The Token2

Setup

• Intro3

• Preparing The Environment34

• Training Lab17

Getting Started

• Intro3

• Creating a Phishlet6

• Catching Phish28

• Personalizing Lures7

Advanced Phishing

• Intro1

• Replacing Content10

• Forcing POST Parameters8

• Handling JSON & LocalStorage5

• JavaScript Injection21

• Landing Page Redirectors6

• Mass Lure Targeting4

• Proxying The Reverse Proxy1

• Blacklist Management4

Security Hardening

• Intro

• Location Validation1

• Secret Token Validation1

Remote Deployment

• Intro

• Set Up Your Server5

• Domain Setup3

• Deploy Evilginx24

• Remote Phishing11

• Persistence1

Deep Sea Phishing

• Intro3

• Okta: Defeating Protections12

• Okta: Session Tokens3

• Okta: Phishlet Templates8

• Microsoft 365 Personal - Creating a Phishlet10

• Microsoft 365 Personal - Cleaning Up9

• Microsoft 365 Enterprise - Adding Compatibility9