
r4ven
Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.

Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.

Burp Suite extension for spoofing IP addresses in HTTP requests, enabling testing of server-side IP restrictions and bypassing IP-based access…

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this…

🕵️♂️ Collect a dossier on a person by username from 3000+ sites

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…

OTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...

CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…

Successor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…

USB Army Knife – the ultimate close access tool for penetration testers and red teamers.

Real-time deepfake toolkit for penetration testing of identity verification and video conferencing systems. Supports face swap, image animation, and…

RunasCs - Csharp and open version of windows builtin runas.exe

Create fake certs for binaries using windows binaries and the power of bat files

Proof-of-concept exploit for Microsoft SharePoint CVE-2026-55040 that forges JWT tokens, bypasses authentication, auto-discovers metadata, and…

This is a SMS And Call Bomber For Linux And Termux

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.

Emulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.