#1
paulpierre/informerA Telegram Mass Surveillance Bot in Python
adamhrv/skyliftWi-Fi Geolocation Spoofing with ESP8266 / ESP32
wh0amitz/petitpotatoLocal privilege escalation via PetitPotam (Abusing impersonate privileges).
sfewer-r7/cve-2026-55040Proof-of-concept exploit for Microsoft SharePoint CVE-2026-55040 that forges JWT tokens, bypasses authentication, auto-discovers metadata, and…
trustedsec/reelPhishing simulation and awareness framework for node-based campaigns, credential capture, SMTP delivery, CAPTCHA, and optional browser credential…
mandatoryprogrammer/thermopticA next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.
byt3bl33d3r/spamchannelSpoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)
mrd0x/bitbHTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…
dec0ne/krbrelayupKrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).
antoniococo/runascsRunasCs - Csharp and open version of windows builtin runas.exe
johnhammond/recaptcha-phishPhishing with a fake reCAPTCHA
synacktiv/prox-ezHTTP/HTTPS interception proxy for testing Windows authentication mechanisms, supporting NTLM, Kerberos, pass-the-hash, pass-the-ticket and relay…
mharjac/bad_duckyRubber Ducky compatible clone based on CJMCU BadUSB HW.
breakfix/sharpscomA C# utility for interacting with SCOM
quinnbast/malicious-mcpA Proof-of-concept repository showing how an untrusted MCP server can steal literally everything...
dtrecherel/dnsspoofA DNS spoofer tool written in Python3.
kevin-robertson/inveighzero.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers
