Bypassing multifactor authentication was once considered more of a proof of concept then an actual threat. In this video, we will review four common techniques an attacker will utilize to hack multifactor and twofactor authentication. We’ll review Evilgenix2, which is a popular framework for stealing authentication cookies, and other methods that an attacker can utilize to bypass the authentication process.

1:06 Evilgenix2 Framework
2:51 Evilgenix Defense and Protection
3:45 Pass the Cookie
5:10 Pass the Cookie Defense and Protection
5:56 SMS ManintheMiddle
6:34 SIM Swap
8:13 Attack on Soft and Hard Tokens
9:22 Hard Token Example

Resources/Links
Evilgenix GitHub: https://github.com/kgretzky/evilginx2
Pass the Cookie example: https://stealthbits.com/blog/bypassin...
Android 0day SMS: https://stealthbits.com/blog/bypassin...