Authorized red team exercise

Evilginx Ops Panel

Hespera Off-Sec Lab · hespera.org

Dashboard

AUTHORIZED RED TEAM EXERCISE
Sessions
Last 24h
With tokens
Unreviewed
Active lures
Bridge mode

Recent captures

TimePhishletUserIPTokens

Sessions

Captured credentials & session tokens from Evilginx
CapturedPhishletUsernameIP TokensStatus

Lures

Operator-managed lure inventory → export to Evilginx CLI

Create lure

Inventory

URLPhishletStatusNoteCreated

Campaigns

Group lures & phishlets under engagement waves

New campaign

NamePhishletStatusCreated

Phishlets

Activate → auto lure + launch pack · ready for launch
NameHostnameStatusLaunch URL

Editor ·

Evilginx bootstrap

CLI script pointed at hespera.org

config · phishlets · lures

Loading…

DNS checklist

TypeNameValue
Ahespera.orgSERVER_IP
A*.hespera.orgSERVER_IP
Alogin.hespera.orgSERVER_IP
Aadmin.hespera.orgSERVER_IP
Aapi.hespera.orgSERVER_IP

Audit log

Operator actions for engagement evidence
TimeOperatorActionDetailIP