#1Tools for simulating human-based attacks (phishing, pretexting, baiting) and testing human factors in security.
Kitploit recommended
postuf/telegram-osint-libPHP library for executing Telegram OSINT scenarios: search users, parse group members, monitor online status, download photos, and track profile…
paranoidninja/o365-doppelgangerA quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user
werdhaihai/atlasreaperA command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.
ninoseki/miteruA phishing kit collector for scavengers
1n3/prism-apAn automated Wireless RogueAP MITM attack framework.
emrekybs/pip-intelModular OSINT tool that aggregates email, phone, IP, and social media intelligence via pip packages. Automates data collection and analysis for…
arcanum-sec/wraithBrowser-hooking framework for authorized red teams and educators. Hooks browsers via XSS, provides interactive post-exploitation control, blind-XSS…
j00sean/cve-2022-44666Technical write-up and proof-of-concept for CVE-2022-44666, a Windows Contacts syslink control href attribute escape vulnerability enabling remote…
initzercreations/tracgramUse Instagram location features to track an account
otterhacker/m365pwnedTwo WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens
trackflaw/cve-2023-23397Simple PoC of the CVE-2023-23397 vulnerability with the payload sent by email.
jumpseclabs/tokenflareServerless AITM Simulation Framework for Entra ID and M365
00xglitch/bellaBella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎💻
ms-web-bn/c41nAutomated rogue access point setup tool.
nemec/snapchat-map-scraperScrapes public Snap Map locations to download and classify stories for investigative analysis, with randomized geolocation and automated review…
aron-tn/mega-bot[NEW] : Mega Bot ☣ Scanner & Auto Exploiter
cryst4linqq/turkoratFully undetected grabber (grabs wallets, passwords, cookies, modifies discord client etc.)
quantika14/osint-suite-toolsRepositorio del conjunto de herramientas para hacer OSINT y SOCMINT con Dante's Gates Minimal Version.
