#1Tools for extracting sensitive data from compromised systems without detection.
Kitploit recommended

DNS Exfiltration tool for stealthily sending files over DNS requests.

A Telegram Mass Surveillance Bot in Python

Proof-of-concept demos and research on indirect prompt injection attacks against application-integrated LLMs, covering data exfiltration, remote…

Generate Gmail Emailing Keyloggers to Windows.

Free email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Serverless, peer-to-peer, local file sharing through sound

KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs…

This repository is a collection of powershell functions every hacker should know

A toolkit to attack Office365

A collection of AWS penetration testing junk

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens…

Open Source Intelligence Interface for Deep Web Scraping

A Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero.

Open-source AI agent firewall that scans HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, emitting verifiable…

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…

Windows Remote-Access-Trojan