Evilginx is an open-source man-in-the-middle attack framework designed to phish login credentials and session cookies to bypass 2FA.