#1Tools for creating, managing, and analyzing fake login pages and email campaigns.
Kitploit recommended
mdsecactivebreach/farmerHarvests NetNTLM hashes in Windows domains via a local WebDAV server, with LNK file poisoning and Office document field code injection for lateral…
r00t-3xp10it/backdoorppttransform your payload.exe into one fake word doc (.ppt)
r00t-3xp10it/meterpeterC2 Powershell Command & Control Framework with BuiltIn Commands
3v4si0n/http-revshellPowershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware
mrd0x/evilseleniumWeaponizes Selenium to automate credential theft, cookie dumping, email exfiltration, and file extraction from Chromium browsers for red team…
r00t-3xp10it/trojanizerTrojanize your payload - WinRAR (SFX) automatization - under Linux distros
arno0x/ntlmrelaytoewsntlm relay attack to Exchange Web Services
fuckjsonp/fuckjsonp-rce-cve-2022-26809-sql-xss-fuckjsonp警惕 一种针对红队的新型溯源手段!
dviros/credsleakerCredsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it…
randomaccess3/awesome-becRepository of attack and defensive information for Business Email Compromise investigations
hoodoer/js-tapJavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and…
secureworks/squarephishAdvanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…
rxwx/chloniumClone and import Chromium cookies and passwords across browsers with offline DPAPI state key decryption, supporting AES-256 GCM encrypted databases…
quickbreach/exchangerelayxAn NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.
komomon/cve-2022-30190-follina-office-msdt-fixedModified CVE-2022-30190 exploit tool for MS-MSDT Office RCE with custom docx template support, binary/command execution modes, and embedded HTTP…
whispergate/infraguardInfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution
4w4k3/insanity-frameworkGenerate Payloads and Control Remote Machines. [Discontinued]
v4d1/spoofthatmailBash script to check if a domain or list of domains can be spoofed based in DMARC records
