support for HTTPS -> HTTP, HTTP -> HTTP, new phishlet property (http_mode)

[jfmaes]

Hey Mate

I had to use evilginx for a HTTP target. had to patch and figured I'd share.

Add HTTP Support for Security Awareness Campaigns

Summary
This PR adds comprehensive HTTP support to evilginx2, enabling security awareness campaigns and internal testing scenarios where TLS certificates are not required or available. This feature allows the phishing server to operate over plain HTTP and proxy to HTTP backend servers.

Changes

New Features

1. HTTP Phishing Server (http_mode)

Phishing server can now listen on plain HTTP (no TLS required)
Configurable via phishlet YAML: http_mode: true
Configurable via CLI: phishlets http_mode on|off
HTTP port configurable: config http_port (default: 80)
Automatically applies when phishlet is enabled if set in YAML

2. HTTP Origin Targets (orig_scheme)
   Proxy can connect to origin servers over HTTP instead of HTTPS
   Set per proxy_host in phishlet YAML: orig_scheme: 'http'
   Correctly routes requests to port 80 for HTTP origins

3. New Example Phishlet
   Added phishlets/example-http.yaml demonstrating HTTP support
   Includes comprehensive documentation and usage examples

Usage Examples

Scenario A: HTTP → HTTP (internal awareness campaign)

: phishlets hostname example-http phish.internal.lan
: phishlets enable example-http
: lures create example-http
: lures get-url 0
Result: http://phish.internal.lan/...

Scenario B: CLI-based HTTP mode
: phishlets hostname mysite attacker.com
: phishlets http_mode mysite on
: phishlets enable mysite

Phishlet YAML Configuration

  http_mode: true  # Enable HTTP mode by default
  
  proxy_hosts:
    - phish_sub: 'app'
      orig_sub: 'app'
      domain: 'target.local'
      orig_scheme: 'http'  # Connect to origin over HTTP

🤖 Generated with Claude Code