#1Tools for creating, managing, and analyzing fake login pages and email campaigns.
Kitploit recommended
mcracker2002/mailphishCreates professional phishing emails with 20+ templates for credential harvesting, including HTML generation and direct email delivery to targets.
optiv/microsoft365_devicephishA proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow
greenwolf/ntlm_theftA tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)
mrd0x/bitbHTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…
greenwolf/social_mapperA Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)
blacklanternsecurity/offensive-azureCollection of offensive tools targeting Microsoft Azure
octoberfest7/xll_phishingXLL Phishing Tradecraft
joelgmsec/evilnovncReal-time phishing platform that bypasses 2FA via a live noVNC browser session, capturing cookies, saved passwords, browsing history, and downloaded…
de3vil/stealingThe SteaLinG is an open-source penetration testing framework designed for social engineering
fin3ss3g0d/evilgophishevilginx3 + gophish
cryst4linqq/turkoratFully undetected grabber (grabs wallets, passwords, cookies, modifies discord client etc.)
secureworks/squarephishAdvanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…
kira2040k/redbloodc2Node.js command-and-control server with FUD payload generation, encrypted communication, session management, and modules for data exfiltration and…
cosmic-zip/witchcraftWITCHCRAFT is a cyberdeck toolkit built for runners who dive deep into the mesh. It’s your all-in-one rig for data-ghosting, ICE-breaking, and…
stmcyber/boobsnailGenerate obfuscated Excel 4.0 XLM macros for red team operations and blue team analysis, with support for multiple infection techniques, formula…
redsiege/excelntdonutExcel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.
octoberfest7/teamsphisherSend phishing messages and attachments to Microsoft Teams users
drew-sec/evilslackbotA Slack bot phishing framework for Red Teaming exercises
