#1Tools for creating, managing, and analyzing fake login pages and email campaigns.
Kitploit recommended
davenisc/thief_raccoonEducational phishing simulation tool that mimics OS login screens to capture credentials for cybersecurity awareness training. Supports Windows,…
olivsec/loboguaraCyber threat intelligence platform for SSL certificate discovery, domain/URL scanning, data leak monitoring, tracking link generation, and threat…
waelmas/frameless-bitbA new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login…
lxance-hacker/lxancephisherAutomated phishing simulation tool with 30+ login page templates, URL masking, and multiple tunneling options (Ngrok, Cloudflared, Serveo) for…
thecyb3ralpha/bobthesmuggler"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would…
anupam2808/spy-maskerIt is a simple Python Script to hide phishing URL under a normal looking URL (google.com or facebook.com). It can be integrated into Phishing tools…
fkasler/cuddlephishWeaponized Browser-in-the-Middle (BitM) for Penetration Testers
spyboy-productions/facad1ngOpen-source URL masking & analysis tool for security research, phishing awareness, and defensive testing. Demonstrates adversary techniques used to…
ecstatic-nobel/osweepDon't Just Search OSINT. Sweep It.
nickvourd/rti-toolkitPowerShell toolkit for remote template injection attacks and defense. Injects malicious links into Office Word documents for phishing, with…
kgretzky/evilqrProof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.
hacksider/deep-live-camreal time face swap and one-click video deepfake with only a single image
xepor/xeporFlask-like routing framework for mitmproxy to intercept, modify, and spoof HTTP requests/responses. Enables rapid development of MITM scripts for…
am0nt31r0/password-analysisScript in Go that analyzes a list of passwords based on in its entropy and weak passwords from a dictionary. Useful for penetration tests and…
micro-joan/zphisher-gui-back_officeReal-time phishing campaign back-office plugin for Zphisher, capturing credentials, checking account exposure via haveibeenpwned, and evaluating…
yuyudhn/tldhuntBash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…
spyboy-productions/r4venTrack the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.
de3vil/htmlsmugglingit is malicious technique used by hackers to hide malware payloads in an encoded script in a specially crafted HTML attachment or web page
