Phishing Tools

crimsonforge-io/king-phisher

Simulate realistic phishing campaigns with credential harvesting, email tracking, and landing page cloning for security awareness training and…

r00t-3xp10it/fakeimageexploiter

Use a Fake image.jpg to exploit targets (hide known file extensions)

r00t-3xp10it/trojanizer

Trojanize your payload - WinRAR (SFX) automatization - under Linux distros

dviros/credsleaker

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it…

undeadsec/socialfish

Modern dynamic phishing toolkit for authorized red team exercises. Clones login pages, captures credentials, cookies, and 2FA codes with a live…

chrismaddalena/goreport

A Python script to collect campaign data from Gophish and generate a report

mazenelzanaty/embomber

Python Script for Email Bombing which supports Gmail, Yahoo, Hotmail/Outlook

chrismaddalena/cooper

A Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns.

deepzec/bad-pdf

Steal Net-NTLM Hash using Bad-PDF

arno0x/ntlmrelaytoews

ntlm relay attack to Exchange Web Services

mdsecactivebreach/sharpshooter

Payload Generation Framework

quickbreach/exchangerelayx

An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.

rmikehodges/hidensneak

a CLI for ephemeral penetration testing

fdx100/phisher-man

Samples Phishing tools made for Linux it contains 30 different type of Phishing Pages made with flask

tkcert/mail-security-tester

A testing framework for mail security and filtering solutions.

s0md3v/jshell

JShell - Get a JavaScript shell with XSS.

kgretzky/evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…

trustedsec/unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…