Bluekit.cc - all in one phishing kit, 40+ templates, evilginx, voice cloning and more

Hello!

I'd like to invite anyone interested to try out my new dashboard (actively developed and currently in beta version): bluekit.pk / bluekit.su / bluekit.cc

This dashboard is primarily intended for security researchers (from red teaming sector) and threat actors of course. It was created as an alternative to the popular and well-known Evilginx Pro and all their resellers like Tycoon2FA or EvilProxy.

The main difference is that the service is fully managed by us and has a lower entry barrier. Anyone can purchase a subscription and start using the dashboard right away. There ?s no need for ridiculous verification or compromising your privacy just to gain access. You don ?t have to be an employee of any company or send us your LinkedIn account.

What exactly do we offer:
* Ready to use 40+ website templates that are 1:1 as original websites
* We can add new as quickly as you can request them - just send the url
* The subscription includes access to ALL available templates - not just one selected
* Automated domain purchase and registration process - you can buy a domain through our dashboard
* Fully working 2FA support with emulation and spoofing of geolocation and browser information so the 2FA prompts do not looks suspicious
* Telegram, in browser native notifications and website "auto refresh" when any new event is detected - you stay updated
* Advanced antibot cloaking system that you can fully configure so your site stay stealth
* Not only capturing cookies but also local storage and all keyboard input
* Everything with anonymity, you can register using Tor Browser and pay via using Monero (XMR)
* We store minimum data and hash all passwords using Argon2
* Ability to host your own website files
* Frequent updates and consideration of customer feedback
* Bulletproof and decentralized infrastructure
* Additional features as: ai assistant, vm checker, voice cloning, mail sender and much, much more

Subscription prices:
7 days - $90
14 days -> $180 $170
30 days -> $385 $350

We aim to continuously develop our dashboard with new features, both those we plan ourselves and those you request.
We are also open to collaboration on any other matter requiring technical skills. If you need any software or technical support, simply contact us and we're sure to find a solution.

I believe the dashboard demonstrates my team's capabilities. We are capable of doing anything as long as it brings money.

Feel free to get in touch

telegram: @bluekit_support
session: 053214a694ac2b7e410dcf3b14ed8e0157f1d82718ca4ff71088db81e5c9b57817
jabber: petrushka@exploit.im

Changelog:

- Added new proxy variables: [STATE], [CITY], and [STATE-ISO-CODE] ? improve location spoofing accuracy
- Fixed templates on mobile: mobile keyboard no longer stretches the site
- Added SOCKS proxy support
- Fixed Google BotGuard and improved user-agent/location spoofing (select the Stealth option)
- New sites in category static templates: Ledger and Trezor
- New function: Launch Browser (BETA) ? run the Mammoth session in a pop-up browser
- Many bug fixes
- Improved site look and quality
- Minor fixes and polish



GOOGLE TEMPLATE
Google Template function showcase: Launch Browser
https://www.youtube.com/watch?v=Lzph7jyp5Gk
New function: Launch Browser (BETA)


This feature lets you open a Mammoth session in a pop-up browser using the same logged-in session,
so you don ?t need to worry about fingerprinting, session mismatches or matching IPs.
The pop-up shares the same session and network context where Mammoth is already logged in.
The feature is currently in BETA; if you encounter any errors or bugs, please report them so we can address and fix the issues.



TREZOR AND LEDGER TEMPLATE

Ledger showcase:
https://www.youtube.com/watch?v=Yn0Q8f5Mkto
Trezor showcase:
https://www.youtube.com/watch?v=zo6PROPhUUs

New Template Sites in Category Static Templates: Ledger and Trezor
The Static Templates category includes ready-made template sites, such as Ledger and Trezor. That display seed-related information from Mammoth sessions in a simple, read-only view.

What this gives you:
* Ready templates: prebuilt pages for popular hardware wallets
* Easy seed access: quickly view seed info from your Mammoth session
* Clean design: a simple, clear layout for fast checks

CHANGELOG

- Added new templates: ionos.co.uk ionos.com ionos.es ionos.de
- Added an option to autofill the identifier (email or username) by passing a parameter in the site URL (for example: gmail.bluekit.pk/?identifier=autofill@gmail.com) - and it can be automatically provided and the button to the next step clicked (if there is any)
- Added option to specify own telegram bot token for people that do not want to affiliate our service for business partners
- Added option to connect telegram bot (even without own bot token) to the group and enable logs sending to the group
- Added telegram log about successful login sends also a file with cookies
- Fixed black screen and disconnections on some mobile devices that occurred when switching between application tabs
- Added iframe events for developers that allow to easily integrate our service into iframe:
```
{
type: "bluekit_session_event"
event: "stream_started" | "session_failed" | "disconnected" | "expired" | "error" | "login_detected" | "redirect"
}
```
- Added a new category of sites FULL-PROXY which allows you to fully mimic pages (for example: Nike or Zalando) and capture any desired information even at checkout. You can set up fully automated fake shops and get all user credentials. It reproduces the entire page and its functionality: product browsing, cart operations, checkout flow, and other interactive elements. THE FULL PAGE
- Fixed twitter/x
- More minor fixes

Show case x.com (twitter)
https://youtu.be/oV5cEBnOZvE

Show case outlook-security
https://youtu.be/N9H-pURF-TE

Show case of full site mimic (ZARA shop)
https://www.youtube.com/watch?v=MQQF2vdMmsU

Changelog
- Added new template sites: amazon.co.jp and HDFC Bank.
- Fixed issues with the function "launch browser".
- Added the ability to set a custom title and favicon for templates.
- Improved the iCloud template.
- Resolved site stretching on older mobile devices (primarily older Android models).
- Added/improved a setting to hide the connecting/reconnecting overlay (enable via Settings ? Hide connecting).
- Added support for iGPU to reduce template latency.
- Added Cloudflare phishing check to the phishing status section.
- Fixed the captcha-hiding function (allows hiding the captcha before Mammoth enters the template).
- Improved sorting of Mammoth's logs.
- Added new payment methods (BTC, LTC, TRX, USDT-TRC20) on dashboard.
- Minor fixes.

another evilnginx wrapper with AI made templates, dont bother spending money nothing novel gemini and evil nginx can recreate

Hello BlueKit users,

Our actually domain list:
bluekit.ws
bluekit.su
bluekit.pk (should work as-well)

TOR (THE MOST STABLE PLEASE SAFE IT!):

http://bluekitsmi6sd5mjurh3l7n7oeizbedoe...kqd.onion/


it's been 48 hours since launch and everything is running smoothly.
Users are using many templates: The most popular are Google, Amazon, iCloud and Facebook (Meta) templates.

The system appears to be stable, so we are exiting the beta phase.
If any errors appears in other templates, please let us know.

Current pricing:

7 Days - 250$
14 Days - 480$
30 Days - 980$


Changelog from the last 2 days:

- Added automatic proxy configuration: We generate the most optimal proxy for each mammoth using chosen provider. Currently we support RainProxy and IPRoyal. This comes handy as it saves you trouble with configuration and avoids mismatched options.
- Added more mammoth data to XLSX and ZIP exports.
- Added custom favicon and custom title support for sites.
- Added new templates: EQ Bank, TD, SoFi, Tradezero, Questrade.
- Added passkey enrollment and password changing automations for Microsoft (Live security).
- Captcha messages are now more descriptive to help debug issues easier.
- Changing password to dashboard account now causes other sessions to be revoked.
- Fixed issues related to enrolling passkeys.
- Fixed Amazon (Security) 2FA issue where system did not enroll 2FA in certain situations.
- Fixed minor Meta (Facebook) issues.
- Fixed bot detection system as it sometimes blocked real users.
- Fixed issue that was causing clicking some elements, such as ReCaptcha widgets, not work.
- Fixed WebKit support (Safari/iOS users).
- Improved overall stability of our infrastructure. We can now handle even more traffic.

We have updated our gmail template setup for sites.google.com - it no longer requires custom code.
Demonstration (how to setup sites.google.com):
https://streamable.com/fv6g9d

how to use gmail passkey showcase:
https://streamable.com/1ww1p2

linkedin template showcase + cookie import:
https://streamable.com/8nbols

Amazon 2fa + passkey showcase (real user):
https://streamable.com/1jojn2

Recent updates:
Implemented improvements to CAPTCHA handling.
Upgraded server infrastructure for improved stability and performance.

24-hour statistics:
948 hits, 6201 users (success hitrate: 15.28%)
The success hitrate depends on your spreading method.

Mostly used templates:
Amazon G-Mail

(contact us via telegram, we provide 24h free trail if you request)