BitM Up! Session Stealing in Seconds Using the Browser-in-the-Middle Technique

This report explains Browser-in-the-Middle (BitM) attacks that enable adversaries to host a browser controlled by the attacker to capture session tokens and bypass MFA across web applications, describing tools and red-team use cases (e.g., Evilginx2, Mandiant's Delusion) and recommending stronger defenses like hardware MFA, client certificates, and FIDO2.