kgretzky/evilginx2 · error

to set custom parameters for the phishing url, use format 'p

Error message

to set custom parameters for the phishing url, use format 'param1=value1 param2=value2'

What it means

In 'lures get-url <id> <param1=value1 ...>', every trailing argument must contain an '=' to separate parameter name from value; one of the tokens did not, so custom phishing-URL parameters cannot be parsed. Validation guard on each argument token in handleLures.

Source

Thrown at core/terminal.go:814

								err = t.exportPhishUrls(export_path, phish_urls, phish_params, format)
								if err != nil {
									return fmt.Errorf("get-url: %v", err)
								}
								out = hiblue.Sprintf("exported %d phishing urls to file: %s\n", len(phish_urls), export_path)
								phish_urls = []string{}
							} else {
								return fmt.Errorf("get-url: expected 'export': %s", args[4])
							}
						}

					} else {
						// params present
						for n := 2; n < pn; n++ {
							val := args[n]

							sp := strings.Index(val, "=")
							if sp == -1 {
								return fmt.Errorf("to set custom parameters for the phishing url, use format 'param1=value1 param2=value2'")
							}
							k := val[:sp]
							v := val[sp+1:]

							params.Add(k, v)

							log.Info("adding parameter: %s='%s'", k, v)
						}
						phish_urls = append(phish_urls, t.createPhishUrl(base_url, &params))
					}
				} else {
					phish_urls = append(phish_urls, t.createPhishUrl(base_url, &params))
				}

				for n, phish_url := range phish_urls {
					out += hiblue.Sprint(phish_url)

					var params_row string

View on GitHub (pinned to 4c0988a1d9)

Solutions

  1. Pass parameters as key=value pairs, e.g. lures get-url 0 user=john id=42.
  2. Quote arguments containing spaces or special shell characters.
  3. Remove or fix any bare token that lacks '='.
Defensive patterns

Strategy: validation

When it happens

Trigger: Thrown at core/terminal.go:814 when the library encounters an invalid state.

Common situations: See trigger scenarios.


AI-assisted analysis of kgretzky/evilginx2@4c0988a1d9 (2026-09-05). Data as JSON: /api/errors/683f8910f43e43b3. Report an issue: GitHub.