#1Phishing simulation, detection, analysis, and security awareness training tools.
Kitploit recommended
undeadsec/socialfishModern dynamic phishing toolkit for authorized red team exercises. Clones login pages, captures credentials, cookies, and 2FA codes with a live…
rspamd/rspamdSpam filtering and email processing framework with regex rules, statistical analysis, custom Lua plugins, and external blocklists for MTA integration.
elceef/dnstwistDomain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
mgeeky/penetration-testing-toolsA collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security…
marten4n6/evilosxAn evil RAT (Remote Administration Tool) for macOS / OS X.
jiep/offensive-ai-compilationA curated list of useful resources that cover Offensive AI.
mrd0x/bitbHTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…
ignitetch/advphishingThis is Advance Phishing Tool ! OTP PHISHING
owasp/qrljackingSocial engineering attack vector and exploitation framework for hijacking user sessions via QR code login, targeting web applications like WhatsApp,…
crimsonforge-io/king-phisherSimulate realistic phishing campaigns with credential harvesting, email tracking, and landing page cloning for security awareness training and…
x0rz/phishing_catcherPhishing catcher using Certstream
fin3ss3g0d/evilgophishevilginx3 + gophish
mattnotmax/cyberchef-recipesA list of cyber-chef recipes and curated links
thalesgroup-cert/watcherAI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…
johnhammond/msdt-follinaGenerates a malicious Microsoft Word document exploiting the MS-MSDT 'Follina' vulnerability to execute arbitrary commands or stage payloads via an…
threatexpress/domainhunterChecks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
ustayready/credsniperCredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
jaykali/maskphishIntroducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.
