EvilnoVNC is a phishing platform designed to bypass two-factor authentication (2FA) using a real browser instance connected through a noVNC server. It addresses the challenge of simulating a legitimate user session to gain access to sensitive information. The tool leverages Chromium and Docker for ease of deployment and execution.
EvilnoVNC differentiates itself by facilitating 2FA bypass through a real browser, offering a more sophisticated attack vector than traditional phishing methods. The platform's architecture allows for comprehensive browser profile access, including downloaded files, cookies, and browsing history. Its focus is on providing a ready-to-use solution for security audits and educational purposes.
- 2FA Bypassing: Enables bypassing 2FA using a real Chromium browser over noVNC.
- Browser Data Access: Provides real-time access to cookies, browsing history, downloaded files, and browser profiles.
- Docker-based: Utilizes Docker for simplified deployment and environment management.
- Customizable Resolution: Supports dynamic and static screen resolutions for enhanced realism.
- Keylogger: Includes a basic keylogger functionality for capturing user input.
- User Agent Replication: Replicates real user-agent strings and other browser information.
- Profile Export: Exports the Evil-Chromium profile to the host for persistent data access.
EvilnoVNC appears to be a relatively mature project, evidenced by its active development and numerous implemented features. The project has a substantial number of stars and forks, indicating community interest. Recent commits suggest ongoing maintenance and improvements. Comprehensive documentation is available via a linked guide, and the project maintains a visible online presence.
EvilnoVNC is valuable for security professionals conducting penetration testing and security audits. It allows for realistic simulation of phishing attacks with 2FA bypass capabilities, enabling thorough testing of security controls. The platform provides a controlled environment for evaluating vulnerabilities and assessing the effectiveness of existing security measures.