Why I decided to make this course

I've received hundreds of messages about making phishlets for Evilginx. Instead of answering all questions and requests, it would be more beneficial to explain how I make phishlets from scratch.

I released my Evilginx3 Phishlets Repo on Github in late 2023

3 months later, its been cloned over 20000 times.

View on Github

Creating phishlets is a mixture of programming, logic & web security

With practice, it becomes much easier over time.

Why would you teach people something like this? Can't Evilginx be used for bad?

This is common question.

For those concerned about the ethics of hacking tutorials as well as tools such as Evilginx or phishlet scripts, it's not the learning of the skill that's unethical, but the choices made in applying it. 

It's like using a hammer – it can be used to build something or to break something. The tool isn't "bad" per say, it’s how you use it that matters. Ethical hacking is using that "hammer" to make things safer, not to cause damage.

Ethical hacking, for example, is a legitimate and necessary practice in improving cybersecurity.


This private training course will explain my systematic process for coding Evilginx Phishlets from scratch in YAML

That way you can make phishlets yourself without any outside intervention or troubleshooting. From proxy_hosts to js_inject.


Understanding each parameter with examples & references for contextual understanding

Scripting with .YAML & O365

50% of Simpler Hacking students are outside of the USA, being able to bring a cost-effective solution to this information is important.


Breaking down my Burpsuite process step by step

Breaking down each parameter with example & where to look for it

We'll be analyzing web requests heavily

SOCRadar

Our new Evilginx Phishlets were used during SOCRadar's latest "Evil of Everything" Security Penetration Test & Showcase


Feel free to use our updated Phishlets for Evilginx3 on Github!

Our Phishlets have been used by thousands of users & teams around the world.

Check out at our other courses!

Enroll to master modern MITM Phishing Attacks in 2025.

View Video Series