#1Tools for creating fake identities, spoofing communications, and impersonating targets for social engineering.
Kitploit recommended
feder-cr/invisible_playwrightPlaywright that anti-bots cannot see, so no captchas: same API, anti-detect stealth headless Firefox, undetected fingerprint, bypass bot detection,…
i-am-shodan/usbarmyknifeUSB Army Knife – the ultimate close access tool for penetration testers and red teamers.
ytkoka/impersonate-proxyA local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…
n3rada/mssqlandIn-target C# post-exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading login…
soxoj/maigret🕵️♂️ Collect a dossier on a person by username from 6K websites
hacksider/deep-live-camreal time face swap and one-click video deepfake with only a single image
alirezaparsi/copgAdvanced per-app device / CPU / GPU spoofer for rooted Android — device profiles, per-app CPU models, prop & Android-ID spoofing, all driven by a…
ultrafunkamsterdam/nodriverSuccessor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…
mandatoryprogrammer/thermopticA next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.
manhnho/chamemaskFake identity generator. 102 countries, one HTML file, no setup.
dagowda/notrdpHavoc C2 plugin that creates a hidden Windows desktop, streams it to a browser viewer, and injects mouse/keyboard input for covert remote control.
sherlock-project/sherlockHunt down social media accounts by username across social networks
pwardle/not-a-musedProof-of-concept exploiting an undocumented Muse dictation endpoint setting, letting a local unprivileged process redirect dictation traffic to…
zerodayevil/cve-2026-54121-certighostProof-of-concept module for CVE-2026-54121 (Certighost), exploiting AD CS enrollment validation via rogue LDAP/SMB listeners to impersonate a Domain…
0x4meliorate/mimicFrameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic…
trustedsec/reelPhishing simulation and awareness framework for node-based campaigns, credential capture, SMTP delivery, CAPTCHA, and optional browser credential…
drk1wi/modlishkaModlishka. Reverse Proxy.
bettercap/bettercapThe Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
