
Deep-Live-Cam
real time face swap and one-click video deepfake with only a single image

real time face swap and one-click video deepfake with only a single image

Playwright that anti-bots cannot see, so no captchas: same API, anti-detect stealth headless Firefox, undetected fingerprint, bypass bot detection,…

Generates obfuscated IP addresses and URLs using DWORD, octal, hex, IPv6-mapped, and fake-domain @ tricks for penetration testing, phishing…

Modlishka. Reverse Proxy.

Havoc C2 plugin that creates a hidden Windows desktop, streams it to a browser viewer, and injects mouse/keyboard input for covert remote control.

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.


Spoof file icons and extensions in Windows

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports…

Manipulating and Abusing Windows Access Tokens.

Python library and client for token manipulations and impersonations for privilege escalation on Windows

CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…

Local privilege escalation via PetitPotam (Abusing impersonate privileges).

HTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

RunasCs - Csharp and open version of windows builtin runas.exe

Proof-of-concept exploit for Microsoft SharePoint CVE-2026-55040 that forges JWT tokens, bypasses authentication, auto-discovers metadata, and…