#1Tools for creating, managing, and analyzing fake login pages and email campaigns.
Kitploit recommended
gmh5225/definitelynotphishingContains evilginx phislets, gophish templates, burp suite extensions etc.
mr-un1k0d3r/redteamscriptsCollection of offensive red team scripts including process termination, SPF bypass for phishing, password spraying, and ColdFusion password…
samsayen/jqueryinguValid JQuery that profiles the system and returns info to the server in a fake analytics GET request
virtualsamuraii/flyphishDeploy a phishing infrastructure on the fly.
mbanyamer/cve-2026-27579-collabplatform-appwrite-cors-misconfigurationExploit PoC for CVE-2026-27579, a CORS misconfiguration in Appwrite backend, demonstrating credentialed account data theft via malicious phishing…
exfil0/weaponizing-cve-2024-4367CVE-2024-4367 is a critical vulnerability (CVSS 9.8) in PDF.js, allowing arbitrary JavaScript code execution due to insufficient type checks on the…
b1tbit/cve-2026-32201-exploitPython exploit for CVE-2026-32201, a reflected XSS in Microsoft SharePoint Server, enabling unauthenticated spoofing and data modification via…
mrbrutti/carteroModular phishing framework with CLI for cloning sites, sending templated emails, and launching phishing campaigns via email, SMS, iMessage, and…
muraenateam/muraenaAutomates phishing and post-phishing activities with an almost-transparent reverse proxy that dynamically mirrors target web apps and interacts with…
0x4meliorate/mimicFrameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic…
yfelipecruvinel/tryhackme-moniker-linkDocumentation of my hands-on lab Moniker Link (CVE-2024-21413) completed on TryHackMe.
dungsocool/cve-2026-64638Proof-of-concept exploit for CVE-2026-64638: reflected XSS in WordPress login chained with DOM clobbering to achieve admin account takeover and…
mohwahyudi/poc-cve-2026-64638-PoC exploit chain for WordPress pre-auth XSS to RCE via DOM clobbering, REST JSONP/SOME, and plugin upload, with Docker lab verification and…
mgeeky/decode-spam-headersA script that helps you understand why your E-Mail ended up in Spam
ceramicskate0/sharpexchangeC# Tool to interact with MS Exchange based on MS docs
montysecurity/infrahunterActively hunt for attacker infrastructure by filtering Shodan results with URLScan data.
rvrsh3ll/azure-app-toolsCollection of tools to use with Azure Applications
d00mfist/mystikalmacOS Initial Access Payload Generator
