Phishing Tools

cosmic-zip/witchcraft

WITCHCRAFT is a cyberdeck toolkit built for runners who dive deep into the mesh. It’s your all-in-one rig for data-ghosting, ICE-breaking, and…

kira2040k/redbloodc2

Node.js command-and-control server with FUD payload generation, encrypted communication, session management, and modules for data exfiltration and…

0xaj2k/cve-2020-11022-cve-2020-11023

Little thing put together quickly to demonstrate this CVE

0xflagplz/ms-msdt-office-rce-follina

CVE-2022-30190 | MS-MSDT Follina One Click

themehackers/cve-2024-21413

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC

arjunindia/fb-phisher-python

A python server tool based on flask , this tool can phish some Facebook credentials!

lxance-hacker/lxancephisher

Automated phishing simulation tool with 30+ login page templates, URL masking, and multiple tunneling options (Ngrok, Cloudflared, Serveo) for…

absholi7ly/microsoft-edge-information-disclosure

CVE-2024-30056 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

pericena/ciclopeclic

Security awareness training tool for authorized phishing simulations and internal IT audits

helidem/cve-2025-24054_cve-2025-24071-poc

Proof of Concept for the NTLM Hash Leak via .library-ms CVE-2025-24054 / CVE-2025-24071

onvio/gophish

Gophish with Malicious Attachment and HTTP redirect support

rmikehodges/hidensneak

a CLI for ephemeral penetration testing

nu11secur1ty/vulnerable-pdf

Educational PDF files demonstrating client-side exploitation techniques, including calculator execution and directory browsing, for security testing…

yasinyilmaz/vuln-chm-hijack

Potential malicious code execution via CHM hijacking (CVE-2019-9896)

bronzebee/cve-2023-23397

Python script for sending e-mails with CVE-2023-23397 payload using SMTP

certainlyp/clipguard

A lightweight tool designed to stop clickfix attacks by using clipboard formatting with execution surface checks