#1Tools for simulating human-based attacks (phishing, pretexting, baiting) and testing human factors in security.
Kitploit recommended

Generate obfuscated Excel 4.0 XLM macros for red team operations and blue team analysis, with support for multiple infection techniques, formula…
Find phishing kits which use your brand/organization's files and image.

A testing framework for mail security and filtering solutions.

Don't Just Search OSINT. Sweep It.

OTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...

Open-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive…

Open-source interactive security awareness training library with 130+ SCORM exercises covering phishing, vishing, BEC, MFA fatigue, and OWASP AI/LLM…

Trends Website (URL) from Twitter hackers.

A Python script to collect campaign data from Gophish and generate a report

A tool for mapping cyber crime

Spoof file icons and extensions in Windows

Real-time phishing campaign back-office plugin for Zphisher, capturing credentials, checking account exposure via haveibeenpwned, and evaluating…

A unified console to perform the "kill chain" stages of attacks.

IP-Biter: The Hacker-friendly E-Mail (but not only) Tracking Framework

Open source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with…

Jasmin Ransomware is an advanced red team tool (WannaCry Clone) used for simulating real ransomware attacks. Jasmin helps security researchers to…

Tool made to automate tasks of pentesting.