#1Tools for creating fake identities, spoofing communications, and impersonating targets for social engineering.
Kitploit recommended

Frameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic…
A C# utility for interacting with SCOM

Relays NegoEx/PKU2U Kerberos authentication to arbitrary targets, enabling credentialless authentication, command execution, SMB hash dumping, and…

This function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder…

CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…

CVE-2020-20093; 20094; 20095; 20096, 2022-28345 RTLO Injection URI Spoofing

Proof-of-concept module for CVE-2026-54121 (Certighost), exploiting AD CS enrollment validation via rogue LDAP/SMB listeners to impersonate a Domain…

A C# implementation of dumping credentials from Windows Credential Manager

CAPTCHA proves you're human. HATCHA proves you're not.

Scripts to clone CA certificates for use in HTTPS client attacks.

flash钓鱼源码 中文+英文

Generates obfuscated IP addresses and URLs using DWORD, octal, hex, IPv6-mapped, and fake-domain @ tricks for penetration testing, phishing…

Impersonate Logged In Accounts & Execute Commands

A local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…

Living Under the Land on Linux ~ Bsides Belfast/Vienna 2025

Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with…

Linux process identity cloaking tool that spoofs comm, argv, cmdline, environ, exe path, and VMAs via an 11-phase prctl pipeline to impersonate…