Defeating Microsoft O365's MFA

In this demonstration, I'm using Evilginx2 to defeat Microsoft's MFA. This tool also has phishlet's for Paypal, Discord, and other platforms that require MFA. It requires Social Engineering (Phishing), but I'm just performing this against myself as a proof of concept.

5/8/20241 min read