#1Tools for simulating human-based attacks (phishing, pretexting, baiting) and testing human factors in security.
Kitploit recommended
thomastjdev/wmdPython framework for IT security tools
d419h/iconjectorInject DLLs into the explorer process using icons
silverfoxx/pwnstarPwnSTAR (Pwn SofT-Ap scRipt) - for all your fake-AP needs!
synacktiv/nord-streamNord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports…
arno0x/ntlmrelaytoewsntlm relay attack to Exchange Web Services
fuckjsonp/fuckjsonp-rce-cve-2022-26809-sql-xss-fuckjsonp警惕 一种针对红队的新型溯源手段!
dviros/credsleakerCredsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it…
randomaccess3/awesome-becRepository of attack and defensive information for Business Email Compromise investigations
hoodoer/js-tapJavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and…
secureworks/squarephishAdvanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…
rxwx/chloniumClone and import Chromium cookies and passwords across browsers with offline DPAPI state key decryption, supporting AES-256 GCM encrypted databases…
aleksamcode/wifi-password-stealerSimple Windows and Linux keystroke injection tool that exfiltrates stored WiFi data (SSID and password).
quickbreach/exchangerelayxAn NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.
komomon/cve-2022-30190-follina-office-msdt-fixedModified CVE-2022-30190 exploit tool for MS-MSDT Office RCE with custom docx template support, binary/command execution modes, and embedded HTTP…
whispergate/infraguardInfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution
sowdust/tafferugliWeb-based framework for filtering, collecting, and analyzing tweets to detect coordinated behavior, automated posting, and propaganda operations with…
4w4k3/insanity-frameworkGenerate Payloads and Control Remote Machines. [Discontinued]
v4d1/spoofthatmailBash script to check if a domain or list of domains can be spoofed based in DMARC records
