#1Tools for creating fake identities, spoofing communications, and impersonating targets for social engineering.
Kitploit recommended
pwardle/not-a-musedProof-of-concept exploiting an undocumented Muse dictation endpoint setting, letting a local unprivileged process redirect dictation traffic to…
otterhacker/m365pwnedTwo WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens
n3rada/mssqlandIn-target C# post-exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading login…
ghost-otpbot/smsotpbotOTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...
0x4meliorate/mimicFrameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic…
henriksb/extensionspooferSpoof file icons and extensions in Windows
muraenateam/muraenaAutomates phishing and post-phishing activities with an almost-transparent reverse proxy that dynamically mirrors target web apps and interacts with…
htr-tech/nexphisherAdvanced Phishing tool
priyankvadaliya/hack-captive-portalThis script helps to pass through the captive portals in public Wi-Fi networks. It hijacks IP and MAC from somebody who is already connected and…
0x574r/darkcloakLinux process identity cloaking tool that spoofs comm, argv, cmdline, environ, exe path, and VMAs via an 11-phase prctl pipeline to impersonate…
thekingofduck/burpfakeipBurp Suite extension for spoofing IP addresses in HTTP requests, enabling testing of server-side IP restrictions and bypassing IP-based access…
venomous/cloudscraperA Python module to bypass Cloudflare's anti-bot page.
s4vitar/eviltrustHerramienta ideal para el despliegue automatizado de un Rogue AP con capacidad de selección de plantilla + 2FA. No requiere de conexión cableada.
sensity-ai/dotReal-time deepfake toolkit for penetration testing of identity verification and video conferencing systems. Supports face swap, image animation, and…
thespeedx/tbombThis is a SMS And Call Bomber For Linux And Termux
kernelfl00d/incriminatorIncriminator is an OpenSource Project with educational purposes that allows you to incriminate other devices during a cybercrime.
ytkoka/impersonate-proxyA local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…
