
impersonate-proxy
A local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…

A local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports…

USB Army Knife – the ultimate close access tool for penetration testers and red teamers.

A Proof-of-concept repository showing how an untrusted MCP server can steal literally everything...

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.

BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation

Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens

Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.

A Telegram Mass Surveillance Bot in Python

Leverage WindowsApp createdump tool to obtain an lsass dump

Decrypt GlobalProtect configuration and cookie files.


Repository for CVE-2023-4281 vulnerability.

Repository for CVE-2023-4279 vulnerability.

A C# implementation of dumping credentials from Windows Credential Manager

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

OTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...