Evilginx

The official Evilginx browser extension made by Kuba Gretzky for browser cookie management.

Evilginx is the official browser toolbar extension for local website session data management and authorised security testing. It provides a single interface to inspect and manage cookies, Local Storage, and Session Storage on HTTP and HTTPS websites. Main features: - View, search, create, edit, copy, and delete cookies. - Inspect and modify Local Storage and Session Storage. - Import and export cookies and page-storage entries as JSON. - Cookie Monitor that records cookies created or updated through Set-Cookie response headers. - Kickstart Evilginx Phishlet 1.0 YAML or Phishlet 2.0 HJSON development using the cookie and hostname records gathered by the monitoring feature. - Cookie Freeze feature allows to test which of the captured cookies hold session authentication tokens. - Optionally disable Device Bound Session Credentials registration by removing two specifically named DBSC response headers. All website data is processed locally. Evilginx does not transmit website data to a server and includes no analytics or tracking. Regular cookie and page-storage records remain only in memory. User-started monitor captures use memory-only extension session storage and are cleared when the browser or extension session ends. While Cookie Freeze is active in a normal window, it temporarily retains a recovery copy of the affected cookie store in local extension storage so it can be restored after an interruption or browser restart. The backup is removed after successful restoration. Private-window recovery data remains memory-only. Use Evilginx only on websites, accounts, and systems that you own or are explicitly authorised to test.