#1Tools for creating, managing, and analyzing fake login pages and email campaigns.
Kitploit recommended
sanupl/letterpress-1.2.1-open-redirection-via-html-injection-vulnerabilityIn LetterPress plugin <= 1.2.1 is vulnerable to Html Injection Vulnerability which can futher leads to Open Redirection Vulnerabilty.
itres-labs/usbcoercerUSBCoercer turns an ESP32 development board with native USB-OTG into an Ethernet-over-USB gadget capable of coercing proxy configuration via WPAD.
otterhacker/m365pwnedTwo WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens
wireghoul/htshellsSelf contained htaccess shells and attacks
minhhk68/cve-2026-13156CVE-2026-13156 Vulnerability Advisory & PoC — Discovered by Huynh Kien Minh (MinhHK).
razureink/cve-2024-43451-ntlm_hash_disclosure_reproductionCVE Reproduction: cve-2024-43451-ntlm_hash_disclosure_reproduction
wh4l3x/cve-2026-xxxx-atlassian-email-enumerationCVE-2026-XXXX: Atlassian GraphQL Email Enumeration Oracle (CWE-204, CVSS 5.3 MEDIUM)
nu11secur1ty/vulnerable-pdfEducational PDF files demonstrating client-side exploitation techniques, including calculator execution and directory browsing, for security testing…
1n3/prism-apAn automated Wireless RogueAP MITM attack framework.
dviros/rat-via-telegramWindows Remote Post Breach Tool via Telegram
operatorequals/smbratA Windows Remote Administration Tool in Visual Basic with UNC paths
ultrafunkamsterdam/nodriverSuccessor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…
an0nud4y/evilginx-phishing-infra-setupEvilginx Phishing Infrastructure Setup Guide - Securing Evilginx and Gophish Infrastructure, Removing IOCs, Phishing TTPs
praetorian-inc/oauthseekerA malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.
00xglitch/bellaBella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎💻
