#1Tools for simulating human-based attacks (phishing, pretexting, baiting) and testing human factors in security.
Kitploit recommended
makdosx/wifi-agentRogue access point tool for creating captive portals, phishing credentials via cloned login pages, and injecting malware downloads for educational…
chrismaddalena/cooperA Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns.
jofpin/sackIdentify connection of sessions for social engineering attacks.
shaheeryasirofficial/smugglemypayloadGenerates HTML smuggling pages that embed and reconstruct files client-side via JavaScript, with payload encoding, chunking, obfuscation, and…
g4lb1t/pstf2Passive Security Tools Fingerprinting Framework
cedowens/mythic-macro-generatorPython3 script to generate a macro to launch a Mythic payload. Author: Cedric Owens
corvralabs/evilnekoAutomated container orchestration tool for Browser-in-the-Browser (BITB) phishing attacks, enabling red teams to scale multi-target infrastructure…
soufianetahiri/teamsntlmleakLeak NTLM via Website tab in teams via MS Office
fdciabdul/fbcheckerFacebook Mass Account Checker
husam212/mitmerAutomated man-in-the-middle attack tool.
zadewg/riusCVE-2020-20093; 20094; 20095; 20096, 2022-28345 RTLO Injection URI Spoofing
ka7ana/cve-2023-23397PowerShell proof-of-concept for CVE-2023-23397 that exploits Outlook's ReminderSoundFile property to intercept Net-NTLMv2 hashes via SMB or WebDAV…
pwardle/not-a-musedProof-of-concept exploiting an undocumented Muse dictation endpoint setting, letting a local unprivileged process redirect dictation traffic to…
ilektrojohn/creepy-pluginsPlugins for cree.py
reverseclabs/cve-2021-25374_samsung-account-accessThis script can be used to gain access to a victim's Samsung Account if they have a specific version of Samsung Members installed on their Samsung…
rub-nds/johnny-you-are-firedArtifacts for the USENIX publication.
jakabakos/cve-2023-36884-ms-office-html-rceMS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploit
xorond/sudo-snooperPython script that acts like the original sudo binary to fool users into entering their passwords
