kgretzky/evilginx2 ? reverse-engineered prompt

I want to build a tool for security testing that shows how phishing attacks can bypass 2-factor authentication. It should act as a man-in-the-middle framework, setting up a proxy to intercept traffic between a user and a target website. When the user logs into the fake page, I need the tool to capture their username, password, and the session cookie. The main goal is to use that session cookie to prove that 2FA can be bypassed.

The tool should be built as a standalone command-line application written in Go. It should have its own HTTP and DNS server built-in so that setup is simple. I'll need a way to configure it with "phishlets" or templates for specific websites. Finally, it should be possible to integrate it with something like Gophish for managing the phishing campaigns themselves.