This guide is to help with the setup of gophish to track clicks, and Evilginx2 to capture tokens and creds for O365 logins. This will work even if MFA is enabled on the target accounts. Update as of 10/10/24: There is an official integration now here that you should probably follow, however, the Evilginx setup […]