#1Tools for creating fake identities, spoofing communications, and impersonating targets for social engineering.
Kitploit recommended
byt3bl33d3r/spamchannelSpoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)
alperenugurlu/nac_bypass_agentThis function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder…
antoniococo/runascsRunasCs - Csharp and open version of windows builtin runas.exe
sensepost/impersonateA windows token impersonation tool
secureworks/squarephishAdvanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…
wh0amitz/petitpotatoLocal privilege escalation via PetitPotam (Abusing impersonate privileges).
nccgroup/droppedconnectionEmulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.
nettitude/runpeC# Reflective loader for unmanaged binaries.
gar-re/cve-2022-27438Proof-of-concept exploit for CVE-2022-27438, demonstrating remote code execution via spoofed update server in Advanced Installer 19.3. Includes DNS…
rxwx/chloniumClone and import Chromium cookies and passwords across browsers with offline DPAPI state key decryption, supporting AES-256 GCM encrypted databases…
quentinhardy/pytmipePython library and client for token manipulations and impersonations for privilege escalation on Windows
lab52io/stopdefenderStop Windows Defender programmatically
htr-tech/nexphisherAdvanced Phishing tool
thekingofduck/burpfakeipBurp Suite extension for spoofing IP addresses in HTTP requests, enabling testing of server-side IP restrictions and bypassing IP-based access…
kevin-robertson/inveighzero.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers
dec0ne/krbrelayupKrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).
morrubin/negoexrelayRelays NegoEx/PKU2U Kerberos authentication to arbitrary targets, enabling credentialless authentication, command execution, SMB hash dumping, and…
hackerxphantom/spoof_anymailMost Powerful Send Fake Mail Using Any Mail I'd undetectable
