Modlishka

Description

Modlishka is a powerful and flexible HTTP reverse proxy tool written in Go for conducting phishing penetration tests. It automatically strips TLS, proxies requests to the legitimate site, and captures credentials and 2FA tokens without requiring custom templates or website cloning.

Use Cases

• Perform reverse proxy phishing without creating custom templates
• Capture 2FA tokens and credentials in real time
• Test organizational defenses against sophisticated phishing attacks

Attack Phases

MITRE ATT&CK Techniques (2)