#1Tools for simulating human-based attacks (phishing, pretexting, baiting) and testing human factors in security.
Kitploit recommended
perezmascato/urlcadizA simple script to generate a hidden url for social engineering.
kennbroorg/ikyOSINT Project. Collect information from a mail. Gather. Profile. Timeline.
jimywork/certstreamcatcherThis tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode (IDNA)…
syss-research/clone-certSimple shell script to "clone" X.509 certificates
yuyudhn/tldhuntBash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…
hackerxphantom/spoof_anymailMost Powerful Send Fake Mail Using Any Mail I'd undetectable
synacktiv/prox-ezHTTP/HTTPS interception proxy for testing Windows authentication mechanisms, supporting NTLM, Kerberos, pass-the-hash, pass-the-ticket and relay…
gr33nm0nk2802/mailmetaAn forensics tool to help aid in the investigation of spoofed emails based off the email headers.
drew-sec/evilslackbotA Slack bot phishing framework for Red Teaming exercises
decoder-it/tokenstealerWindows token manipulation utility that lists, steals, and impersonates process or user tokens to execute commands as other users, leveraging…
csalab-id/csafCyber Security Awareness Framework (CSAF)
n3rada/mssqlandIn-target C# post-exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading login…
fdx100/phisher-manSamples Phishing tools made for Linux it contains 30 different type of Phishing Pages made with flask
fundacio-i2cat/infohoundInfoHound is an OSINT to extract a large amount of data given a web domain name.
reedgraff/hingesdkHinge Dating App SDK for python for lonely bored SWEs
quentinhardy/pytmipePython library and client for token manipulations and impersonations for privilege escalation on Windows
