Evilginx captures, streamed live into your pentest engagement

Neuron loves Evilginx. Evilginx is the go-to framework for phishing campaigns, capturing both clear text credentials and live session tokens. With the Neuron CLI, every credential and every session Evilginx captures streams straight into your engagement in real time for your entire team. Let me show you how it works.

The Neuron CLI runs on your operator laptop. It opens an SSH connection to the jump box where Evilginx is running and streams events back to your Neuron server. One command, no log scraping, no copy and paste, and logs are always in the correct time zone.

Here, I'm logged into Neuron on the live events page for this engagement. We have Evilginx running in our lab. And on my operator laptop, I'll start the Neuron CLI, connect to the jump box, and start the Evilginx collector. And that's it. We're live.

Now I'll play the victim. I received the phish and I'll sign in. Now watch the events page, credentials captured, streaming in live. And it's not just the password. Here's a full capture, enough to ride that session straight past MFA. Everything Evilginx saw, Neuron has.

Every operator on this engagement sees these events the instant they land. Nobody is tailing logs over SSH. And turning a capture into a reportable finding is a few clicks. The session, the landing URL, the user agent, the source address, all of that context comes along for free.

Evilginx is just one of Neuron's collectors. The CLI pulls telemetry from wherever your operation runs, and every event is one step from a finding. Because your whole team stays in sync, your report can be ready the day you finish. Imagine that. That's Neuron. Stop by today at neuron.ws.