#1Tools for simulating human-based attacks (phishing, pretexting, baiting) and testing human factors in security.
Kitploit recommended
b0marek/cve-2023-4281Repository for CVE-2023-4281 vulnerability.
mbadanoiu/cve-2021-46366CVE-2021-46366: Credential Bruteforce Attack via CSRF + Open Redirect in Magnolia CMS
urban4/cve-2022-3992Cross Site Scripting on sanitization-management-system
artemcyberlab/project-ntlm-hash-capture-and-phishing-email-exploitation-for-cve-2024-21413Demonstrates capturing NTLM hashes via Responder and executing phishing emails exploiting CVE-2024-21413 to compromise systems.
abdurahmon3236/cve-2022-4539Exploit for CVE-2022-4539 that spoofs X-Forwarded-For headers to bypass WordPress WAF IP-based login and logging restrictions. Includes scalable…
jm-lemmi/cve-2019-17497POC Files for CVE-2019-17497
sromanhu/cve-2023-43871-wbce-arbitrary-file-upload--xss---mediaWBCE 1.6.1 is affected by File Upload - XSS vulnerability that allows attackers to upload a PDF file with a hidden XSS that when executed will launch…
b0marek/cve-2023-4631Repository for CVE-2023-4631 vulnerability.
g37sys73m/cve-2022-46087CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification…
security-avs/cve-2019-13633Proof of concept for a blind/persistent XSS vulnerability in Blinger.io helpdesk, demonstrating remote code execution in admin panels via crafted…
sudosammy/cve-2017-15394Demonstrates an IDN homograph attack in Chromium extensions to spoof URLs, aiding in deception attacks by coercing victims into granting permissions…
sromanhu/cve-2023-43872-cmsmadesimple-arbitrary-file-upload--xss---file-managerCMSmadesimple 2.2.18 is affected by File Upload - XSS vulnerability that allows attackers to upload a PDF file with a hidden XSS that when executed…
mcracker2002/mailphishCreates professional phishing emails with 20+ templates for credential harvesting, including HTML generation and direct email delivery to targets.
mbadanoiu/mal-008Case Study: SSHtranger Things (CVE-2019-6111, CVE-2019-6110) in Cisco SD-WAN
eddyflores100-lang/taikotalent-phishing-iocsIoCs, attack chain & detection for the taikotalent.xyz fake-Taiko-recruiter campaign delivering a self-deleting Bash trojan via the paste-in-terminal…
ahmadhassan-bted/silentsnifferA professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for…
emrekybs/veiled-eyeOSINT identity investigation tool. Pivot from an e-mail, username, phone or wallet across 46 sources into one profile and relationship graph.
