ErrLookup › kgretzky/evilginx2
kgretzky/evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication · Go · 21 source files
Analyzed at 4c0988a1d9 on 2026-09-05. 113 documented errors.
| Code / Message | Type | Severity | Tags |
|---|---|---|---|
| invalid command line string | validation | error | parsing, command-line, quoting |
| invalid ip address: %s | validation | error | network, validation, ip-address |
| private key generation failed | exception | critical | crypto, tls, rng, certificate |
| private key is corrupted | exception | critical | crypto, tls, certificate, corruption |
| failed to list certificates in directory '%s': %v | exception | error | filesystem, certificate, configuration |
| failed to list certificate directory '%s': %v | exception | error | filesystem, certificate, permissions |
| failed to get TLS certificate for: %s:%d error: %s | exception | error | tls, network, certificate |
| enabling phishlet '%s' requires its hostname to be set up | validation | error | configuration, phishlet, hostname |
| phishlet '%s' is a template - you have to 'create' child phi | validation | error | configuration, phishlet, template |
| phishlet '%s' already exists | validation | error | configuration, phishlet, duplicate |
| phishlet '%s' can't be deleted - you can only delete child p | validation | error | config, phishlet, go |
| index out of bounds: %d | validation | error | config, lure, index-out-of-range, go |
| lure for path '%s' not found | exception | warning | config, lure, not-found, go |
| phishlet '%s' not found | exception | error | config, phishlet, not-found, go |
| invalid api key | exception | error | gophish, auth, api-key, http-401 |
| status: %d | exception | error | gophish, http, api |
| admin url is not set | validation | error | gophish, config, missing-setting |
| api key is not set | validation | error | gophish, auth, api-key, missing-setting |
| command not found | exception | info | cli, command-not-found, help |
| phishing hostname not found | exception | warning | proxy, hostname, mitm, phishlet |
| invalid proxy type selected | validation | error | proxy, configuration, validation |
| proxy address can't be empty | validation | error | proxy, configuration, validation |
| proxy port can't be 0 | validation | error | proxy, configuration, validation |
| this phishlet is incompatible with current version of evilgi | validation | error | phishlet, configuration, version-compatibility, migration |
| this phishlet is incompatible with current version of evilgi | validation | error | phishlet, configuration, version-compatibility, migration |
| missing custom parameter values during initalization: %v | validation | error | phishlet, configuration, missing-parameter, template |
| missing `proxy_hosts` section | validation | error | phishlet, configuration, schema-validation, missing-section |
| missing `auth_tokens` section | validation | error | phishlet, configuration, schema-validation, missing-section |
| missing `credentials` section | validation | error | phishlet, config-validation, evilginx |
| credentials: missing `username` section | validation | error | phishlet, config-validation, credentials |
| credentials: missing `password` section | validation | error | phishlet, config-validation, credentials |
| missing `login` section | validation | error | phishlet, config-validation, login-url |
| proxy_hosts: missing `phish_sub` field | validation | error | phishlet, proxy-hosts, config-validation |
| proxy_hosts: missing `orig_sub` field | validation | error | phishlet, proxy-hosts, config-validation |
| proxy_hosts: missing `domain` field | validation | error | phishlet, proxy-hosts, config-validation |
| proxy_hosts: list cannot be empty | validation | error | phishlet, proxy-hosts, config-validation |
| sub_filters: missing `triggers_on` field | validation | error | phishlet, sub-filters, config-validation |
| sub_filters: missing `orig_sub` field | validation | error | phishlet, sub-filters, config-validation |
| sub_filters: missing `domain` field | validation | error | phishlet, config-validation, sub-filters, missing-field |
| sub_filters: missing `mimes` field | validation | error | phishlet, config-validation, sub-filters, missing-field |
| sub_filters: missing `search` field | validation | error | phishlet, config-validation, sub-filters, missing-field |
| sub_filters: missing `replace` field | validation | error | phishlet, config-validation, sub-filters, missing-field |
| js_inject: missing `trigger_domains` field | validation | error | phishlet, config-validation, js-inject, missing-field |
| js_inject: missing `trigger_paths` field | validation | error | phishlet, config-validation, js-inject, missing-field |
| js_inject: missing `script` field | validation | error | phishlet, config-validation, js-inject, missing-field |
| intercept: missing `domain` field | validation | error | phishlet, config-validation, intercept, missing-field |
| intercept: `domain` field cannot be empty | validation | error | phishlet, configuration, yaml-validation |
| intercept: missing `path` field | validation | error | phishlet, configuration, yaml-validation |
| intercept: `path` invalid regular expression: %v | validation | error | phishlet, configuration, regex, yaml-validation |
| intercept: missing `http_status` field | validation | error | phishlet, configuration, yaml-validation |
| auth_tokens: invalid token type: %s | validation | error | phishlet, configuration, auth-tokens, yaml-validation |
| auth_tokens: 'domain' not found for cookie auth token | validation | error | phishlet, configuration, auth-tokens, yaml-validation |
| auth_tokens: 'keys' not found for cookie auth token | validation | error | phishlet, configuration, auth-tokens, yaml-validation |
| auth_tokens: 'domain' not found for body auth token | validation | error | phishlet, configuration, auth-tokens, yaml-validation |
| auth_tokens: 'path' not found for body auth token | validation | error | phishlet, configuration, auth-tokens, yaml-validation |
| auth_tokens: 'name' not found for body auth token | validation | error | phishlet, configuration, auth-tokens, yaml-validation |
| auth_tokens: 'search' not found for body auth token | validation | error | phishlet, config, yaml, validation |
| auth_tokens: 'domain' not found for http auth token | validation | error | phishlet, config, yaml, validation |
| auth_tokens: 'path' not found for http auth token | validation | error | phishlet, config, yaml, validation |
| auth_tokens: 'name' not found for http auth token | validation | error | phishlet, config, yaml, validation |
| auth_tokens: 'header' not found for http auth token | validation | error | phishlet, config, yaml, validation |
| credentials: missing username `key` field | validation | error | phishlet, config, credentials, validation |
| credentials: missing username `search` field | validation | error | phishlet, config, credentials, validation |
| credentials: missing password `key` field | validation | error | phishlet, config, credentials, validation |
| credentials: missing password `search` field | validation | error | phishlet, config, credentials, validation |
| credentials: %v | validation | error | phishlet, regex, config, credentials |
| login: missing `domain` field | validation | error | configuration, phishlet, yaml, missing-field |
| login: missing `path` field | validation | error | configuration, phishlet, yaml, missing-field |
| login: `domain` field cannot be empty | validation | error | configuration, phishlet, validation, hostname |
| login: `domain` must contain a value of one of the hostnames | validation | error | configuration, phishlet, validation, hostname |
| credentials: missing custom `key` field | validation | error | configuration, phishlet, yaml, missing-field |
| credentials: missing custom `search` field | validation | error | configuration, phishlet, yaml, missing-field |
| force_post: missing or empty `path` field | validation | error | phishlet, config-validation, force-post |
| force_post: unknown type - only 'post' is currently supporte | validation | error | phishlet, config-validation, force-post |
| force_post: missing or empty `force` field | exception | error | phishlet, config-validation, force-post |
| force_post: missing search `key` field | exception | error | phishlet, config-validation, force-post |
| force_post: missing search `search` field | exception | error | phishlet, config-validation, force-post, regex |
| force_post: missing force `key` field | exception | error | phishlet, config-validation, force-post |
| force_post: missing force `value` field | exception | error | phishlet, config-validation, force-post |
| script not found | exception | error | phishlet, js-inject, lookup-miss |
| js_inject: %v | exception | error | phishlet, js-inject, regexp |
| invalid version format (must be X.Y.Z) | validation | error | phishlet, version-parsing, validation |
| invalid syntax: %s | validation | error | cli, terminal, syntax |
| please disable the proxy before making changes to its config | exception | error | cli, proxy, state-conflict |
| id %d not found | exception | error | cli, sessions, lookup |
| set custom parameters for the child phishlet using format 'p | validation | error | cli, phishlet, syntax-error |
| phishlet '%s' is a template - you have to 'create' child phi | exception | error | phishlet, configuration, workflow |
| no hostname set for phishlet '%s' | exception | error | phishlet, configuration, hostname |
| incorrect number of arguments | validation | warning | cli, lures, syntax-error |
| get-url: %v | exception | warning | cli, lures, invalid-argument |
| get-url: no import path specified | validation | error | |
| get_url: %v | exception | error | |
| get-url: no export path specified | validation | error | |
| get-url: expected 'export': %s | validation | error | |
| to set custom parameters for the phishing url, use format 'p | validation | error | |
| pause: %v | exception | error | |
| edit: %v | exception | error | go, cli, persistence |
| edit: lure hostname must end with the base domain '%s' | validation | error | go, cli, validation, dns |
| edit: invalid hostname | validation | error | go, cli, validation, hostname |
| edit: redirect url must be absolute | validation | error | cli, url-validation, evilginx2 |
| edit: image url must be absolute | validation | error | cli, url-validation, og-metadata, evilginx2 |
| edit: site url must be absolute | validation | error | cli, url-validation, og-metadata, evilginx2 |
| edit: redirector directory does not exist: %s | validation | error | cli, filesystem, evilginx2 |
| delete: %v | exception | error | cli, argument-validation, strconv, evilginx2 |
| array of parameters not found | exception | error | json, file-import, dead-code |
| phishing urls and phishing parameters count do not match | validation | error | data-integrity, export, invariants |
| export format can only be 'text', 'csv' or 'json' | validation | error | cli, validation, export-format |
| you can only use time duration types in following order: 'd' | validation | error | parsing, duration, validation |
| unknown time duration type: '%s', you can use only 'd', 'h', | validation | error | parsing, duration, validation |
| time duration value needs to start with a number | validation | error | parsing, duration, validation |
| session already exists: %s | exception | warning | go, database, buntdb, duplicate-key, session-management |
| session ID not found: %d | exception | error | go, database, buntdb, not-found, session-management |
| session not found: %s | exception | error | go, database, buntdb, not-found, session-management |