#1Tools for simulating human-based attacks (phishing, pretexting, baiting) and testing human factors in security.
Kitploit recommended

A tool to transform Chromium browsers into a C2 Implant
Emora is an OSINT tool like sherlock but with a GUI, which search for accounts by username across social networks

JShell - Get a JavaScript shell with XSS.

Stop Windows Defender programmatically

Evilginx Phishing Infrastructure Setup Guide - Securing Evilginx and Gophish Infrastructure, Removing IOCs, Phishing TTPs

Automated OSINT reconnaissance tool that queries Google and social platforms to gather intelligence on usernames and queries, with proxy rotation and…

raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.

Embed and hide any file in an HTML file

Email OSINT tool that resolves names, checks deliverability, detects disposable/spam addresses, and identifies registrations on 10+ social platforms…

Automates vishing calls via Discord bot and API to intercept SMS one-time passwords, bypassing SMS verification for PayPal, Google, Instagram, and 3D…

Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.

OSINT tool for investigating GitHub profiles: tracks username/name history, maps emails to accounts, clones repos for analysis, finds secondary…

Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.

Create fake certs for binaries using windows binaries and the power of bat files


"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would…

Wi-Fi Geolocation Spoofing with ESP8266 / ESP32

OSINT Tool gets a range of information from an Instagram account 🛠