#1Tools for creating fake identities, spoofing communications, and impersonating targets for social engineering.
Kitploit recommended

Hunt down social media accounts by username across social networks
real time face swap and one-click video deepfake with only a single image

Playwright that anti-bots cannot see, so no captchas: same API, anti-detect stealth headless Firefox, undetected fingerprint, bypass bot detection,…

Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.

Generates obfuscated IP addresses and URLs using DWORD, octal, hex, IPv6-mapped, and fake-domain @ tricks for penetration testing, phishing…

Modlishka. Reverse Proxy.

🕵️♂️ Collect a dossier on a person by username from 6K websites

Advanced per-app device / CPU / GPU spoofer for rooted Android — device profiles, per-app CPU models, prop & Android-ID spoofing, all driven by a…

Fake identity generator. 102 countries, one HTML file, no setup.

Havoc C2 plugin that creates a hidden Windows desktop, streams it to a browser viewer, and injects mouse/keyboard input for covert remote control.

Modern dynamic phishing toolkit for authorized red team exercises. Clones login pages, captures credentials, cookies, and 2FA codes with a live…

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this…

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

Proof-of-concept exploiting an undocumented Muse dictation endpoint setting, letting a local unprivileged process redirect dictation traffic to…

Rogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…