#1Tools for creating fake identities, spoofing communications, and impersonating targets for social engineering.
Kitploit recommended


Proof-of-concept exploit for CVE-2023-0264 (Keycloak OIDC session hijacking) with a frontend for session_id substitution and an agent that detects…

Repository for CVE-2023-4279 vulnerability.

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

Pass the Hash to a named pipe for token Impersonation

Decrypt GlobalProtect configuration and cookie files.

Leverage WindowsApp createdump tool to obtain an lsass dump

This function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder…

Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with…

Repository for CVE-2023-4281 vulnerability.

Emulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.

Rusty Impersonate

Scripts to clone CA certificates for use in HTTPS client attacks.

Ask a TGS on behalf of another user without password

CVE-2021-46067 - In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.

This vulnerability allows unauthenticated attackers who know a valid administrator username to impersonate that admin during REST API requests by…

Repository for CVE-2023-4631 vulnerability.

Exploit for CVE-2022-4539 that spoofs X-Forwarded-For headers to bypass WordPress WAF IP-based login and logging restrictions. Includes scalable…