Tactical Multi-Factor Authentication (MFA) Bypass Attacks

Phishing from a distance is a frequently seen attack vector. Modern tools like evilginx for phishing credentials with office365 are great for initial access, and in some cases lateral movement. In this stream, we will look at an internal pivot; we'll use evilginx to bypass MFA. As part of this, we'll take a more tactical look at how evilginx can be tailored to your needs beyond just a classic phishing campaign.
Follow Jim on Twitter/X here: x.com/jimshew

[@mr.no1ne]

Really hate I missed this one live. loved SEC660

[@maxmoon3162]

Thank you demo gods!