#1Tools for creating, managing, and analyzing fake login pages and email campaigns.
Kitploit recommended
makdosx/mip22Advanced phishing framework with 83 pre-built cloned websites, manual site cloning, URL masking, and real-time credential capture with audio…
klezvirus/vortexVPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit
mr-un1k0d3r/maliciousmacrogeneratorGenerates obfuscated VBA macros with AV/sandbox evasion for command execution payloads, supporting domain, disk, memory, and process checks.
makdosx/wifi-agentRogue access point tool for creating captive portals, phishing credentials via cloned login pages, and injecting malware downloads for educational…
mgeeky/packmypayloadA PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats.…
rxwx/chloniumClone and import Chromium cookies and passwords across browsers with offline DPAPI state key decryption, supporting AES-256 GCM encrypted databases…
mrd0x/evilseleniumWeaponizes Selenium to automate credential theft, cookie dumping, email exfiltration, and file extraction from Chromium browsers for red team…
steved3/kit_hunterA basic phishing kit scanner for dedicated and semi-dedicated hosting
trouble-1/vajraVajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive…
kingsabri/gocabritoSuper organized and flexible script for sending phishing campaigns
chenjj/espooferAn email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻
emalderson/thephishThePhish: an automated phishing email analysis tool
bitsadmin/fakelogonscreenWindows credential harvester that displays a fake logon screen, validates captured passwords against AD or local machine, and outputs them to console…
v4d1/spoofthatmailBash script to check if a domain or list of domains can be spoofed based in DMARC records
cedowens/mythic-macro-generatorPython3 script to generate a macro to launch a Mythic payload. Author: Cedric Owens
ctxis/snitchdnsDatabase Driven DNS Server with a Web UI
qsecure-labs/overlordPython-based CLI for automated red team infrastructure deployment on AWS and Digital Ocean, with modular support for C2, email servers, HTTP…
ultrasecurity/storm-breakerSocial engineering tool [Access Webcam & Microphone & Location Finder] With {Py,JS,PHP}
