#1Tools for creating, managing, and analyzing fake login pages and email campaigns.
Kitploit recommended
ka7ana/cve-2023-23397PowerShell proof-of-concept for CVE-2023-23397 that exploits Outlook's ReminderSoundFile property to intercept Net-NTLMv2 hashes via SMB or WebDAV…
reverseclabs/cve-2021-25374_samsung-account-accessThis script can be used to gain access to a victim's Samsung Account if they have a specific version of Samsung Members installed on their Samsung…
jakabakos/cve-2023-36884-ms-office-html-rceMS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploit
xorond/sudo-snooperPython script that acts like the original sudo binary to fool users into entering their passwords
jasmoon99/embedded-pdfThis demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists…
malwaretech/exifsmugglingpocA Proof-of-Concept using Cache Smuggling + Exif data to passively download a second stage payload
montysecurity/infrahunterActively hunt for attacker infrastructure by filtering Shodan results with URLScan data.
virtualsamuraii/flyphishDeploy a phishing infrastructure on the fly.
kingsabri/gocabritoSuper organized and flexible script for sending phishing campaigns
mattiaalessi/phantom-keyloggerPhantom Keylogger is an advanced, stealth-enabled keystroke and visual intelligence gathering system.
rootup/git-fsmonitorThis is a proof-of-work for abusing "fsmonitor" against IDE.
nickvourd/rti-toolkitPowerShell toolkit for remote template injection attacks and defense. Injects malicious links into Office Word documents for phishing, with…
bishopfox/ca-cloneScripts to clone CA certificates for use in HTTPS client attacks.
cisc0-gif/kittPython-Based Pentesting Framework
operatorequals/smbratA Windows Remote Administration Tool in Visual Basic with UNC paths
olizimmermann/phishcollectorPhishCollector is a research framework for collecting, analysing, and tracking phishing sites.
