#1Tools for creating, managing, and analyzing fake login pages and email campaigns.
Kitploit recommended
ustayready/credsniperCredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
spyboy-productions/r4venTrack the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.
4w4k3/beeloggerGenerate Gmail Emailing Keyloggers to Windows.
chenjj/espooferAn email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻
redbyte1337/graphspyInitial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI
kgretzky/pwndropSelf-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.
mdsecactivebreach/o365-attack-toolkitA toolkit to attack Office365
emalderson/thephishThePhish: an automated phishing email analysis tool
t3l3machus/toxssinAn XSS exploitation command-line interface and payload generator.
r00t-3xp10it/fakeimageexploiterUse a Fake image.jpg to exploit targets (hide known file extensions)
joelgmsec/evilnovncReal-time phishing platform that bypasses 2FA via a live noVNC browser session, capturing cookies, saved passwords, browsing history, and downloaded…
viralmaniar/i-see-youISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location…
mgeeky/packmypayloadA PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats.…
raikia/fiercephishFiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule…
wireghoul/htshellsSelf contained htaccess shells and attacks
kgretzky/evilginxPLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2
arno0x/embedinhtmlEmbed and hide any file in an HTML file
