#1Tools for simulating human-based attacks (phishing, pretexting, baiting) and testing human factors in security.
Kitploit recommended
wavvs/doctrackTool to manipulate and weaponize Office Open XML documents.
steved3/kit_hunterA basic phishing kit scanner for dedicated and semi-dedicated hosting
cisc0-gif/kitt-litePython-Based Pentesting CLI Tool
praetorian-inc/oauthseekerA malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.
thegeekht/loki.ratLoki.Rat is a fork of the Ares RAT, it integrates new modules, like recording , lockscreen , and locate options. Loki.Rat is a Python Remote Access…
de3vil/htmlsmugglingit is malicious technique used by hackers to hide malware payloads in an encoded script in a specially crafted HTML attachment or web page
zblurx/impersonate-rsRusty Impersonate
rvrsh3ll/azure-app-toolsCollection of tools to use with Azure Applications
nccgroup/droppedconnectionEmulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.
rasta-mouse/spawnwithCobalt Strike BOF that spawns a process using another user's token and injects Beacon shellcode, enabling post-exploitation and lateral movement via…
jqueguiner/lk_scraperAn fully configurable linkedin scrape : scrape anything within linkedin
joelgmsec/fakedatagenGenerates fully valid fake identities in Spanish format, including names, emails, bank details, and extended info, with optional zip compression and…
brmkit/toastnotify-bofabusing windows toast notifications for fun and user manipulation
mrbrutti/carteroModular phishing framework with CLI for cloning sites, sending templated emails, and launching phishing campaigns via email, SMS, iMessage, and…
sfewer-r7/cve-2026-55040Proof-of-concept exploit for Microsoft SharePoint CVE-2026-55040 that forges JWT tokens, bypasses authentication, auto-discovers metadata, and…
rweijnen/createdumpLeverage WindowsApp createdump tool to obtain an lsass dump
0x4meliorate/mimicFrameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic…
trustedsec/reelPhishing simulation and awareness framework for node-based campaigns, credential capture, SMTP delivery, CAPTCHA, and optional browser credential…
