#1Tools for creating, managing, and analyzing fake login pages and email campaigns.
Kitploit recommended
reverseclabs/cve-2021-25374_samsung-account-accessThis script can be used to gain access to a victim's Samsung Account if they have a specific version of Samsung Members installed on their Samsung…
reggyraider/cve-2023-21716CVE-2023-21716 - Microsoft Word RTF fonttbl Heap Corruption RCE exploit with reverse shell payload
quinnbast/malicious-mcpA Proof-of-concept repository showing how an untrusted MCP server can steal literally everything...
gendigitalinc/sageLightweight Agent Detection & Response (ADR) layer for AI agents — guards commands, files, and web requests. Part of Gen Agent Trust Hub.
goshs-labs/goshsFeature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP…
olizimmermann/phishcollectorPhishCollector is a research framework for collecting, analysing, and tracking phishing sites.
rootup/git-fsmonitorThis is a proof-of-work for abusing "fsmonitor" against IDE.
d4vinci/pastejackerHacking systems with the automation of PasteJacking attacks.
wifiphisher/wifiphisherRogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…
viralmaniar/i-see-youISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location…
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
edu0x01/hack-toolsProject that brings together several pentest tools
generaldussduss/poseidon80+ feature pentesting firmware for M5Stack Cardputer-Adv. WiFi, BLE, sub-GHz (CC1101), 2.4GHz (nRF24), LoRa (SX1262), IR, BadUSB, DHCP attacks,…
khr0x40sh/macroshopCollection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.
xorond/sudo-snooperPython script that acts like the original sudo binary to fool users into entering their passwords
antisnatchor/phishlulzAutomated phishing campaign toolset that spawns dedicated AWS EC2 instances with integrated PhishingFrenzy and BeEF, plus subdomain discovery and…
r00t-3xp10it/morpheusMorpheus - Automating Ettercap TCP/IP (MITM-hijacking Tool)
