Evilginx

Evilginx is the official browser toolbar extension for local website session data management and authorised security testing. It provides a single interface to inspect and manage cookies, Local Storage, and Session Storage on HTTP and HTTPS websites. Main features: - View, search, create, edit, copy, and delete cookies. - Inspect and modify Local Storage and Session Storage. - Import and export cookies and page-storage entries as JSON. - Cookie Monitor that records cookies created or updated through Set-Cookie response headers. - Kickstart Evilginx Phishlet 1.0 YAML or Phishlet 2.0 HJSON development using the cookie and hostname records gathered by the monitoring feature. - Cookie Freeze feature allows to test which of the captured cookies hold session authentication tokens. - Optionally disable Device Bound Session Credentials registration by removing two specifically named DBSC response headers. All website data is processed locally. Evilginx does not transmit website data to a server and includes no analytics or tracking. Regular cookie and page-storage records remain only in memory. User-started monitor captures use memory-only extension session storage and are cleared when the browser or extension session ends. While Cookie Freeze is active in a normal window, it temporarily retains a recovery copy of the affected cookie store in local extension storage so it can be restored after an interruption or browser restart. The backup is removed after successful restoration. Private-window recovery data remains memory-only. Use Evilginx only on websites, accounts, and systems that you own or are explicitly authorised to test.