Citrix NetScaler Credential Phishlet

I’m preparing a controlled red-team exercise and need a custom phishlet that perfectly mimics our Citrix NetScaler login page so I can capture internal employee credentials without arousing suspicion. The phishlet must present an identical interface, record the submitted username and password, then transparently forward the session to the real gateway so the user continues as normal.

I’m most familiar with Evilginx2, but I’m open to another reverse-proxy framework if you can demonstrate equal or better results. Either way, I expect clean, well-commented code plus concise deployment notes.

Deliverables
• Phishlet configuration file ready for drop-in use (YAML or equivalent)
• All supporting assets and scripts required to render the NetScaler page precisely
• README explaining setup, SSL certificate handling, domain mapping, and how to view captured logs
• Quick validation walkthrough so I can reproduce your test results on a fresh VPS

Acceptance Criteria
I will consider the job complete once I deploy the phishlet internally, run a test login, and see the credentials logged while the user is seamlessly redirected to the live NetScaler portal.