Tools

crimsonforge-io/king-phisher

Simulate realistic phishing campaigns with credential harvesting, email tracking, and landing page cloning for security awareness training and…

ustayready/credsniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

dec0ne/krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

antoniococo/runascs

RunasCs - Csharp and open version of windows builtin runas.exe

muraenateam/muraena

Automates phishing and post-phishing activities with an almost-transparent reverse proxy that dynamically mirrors target web apps and interacts with…

guallagang508/smsbotbypass

otp bot

r00t-3xp10it/backdoorppt

transform your payload.exe into one fake word doc (.ppt)

lab52io/stopdefender

Stop Windows Defender programmatically

oriyomi12/otp-bot

Automates vishing calls via Discord bot and API to intercept SMS one-time passwords, bypassing SMS verification for PayPal, Google, Instagram, and 3D…

mzhmo/powershellkerberos

Some scripts to abuse kerberos using Powershell

nettitude/runpe

C# Reflective loader for unmanaged binaries.

byt3bl33d3r/spamchannel

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

foxlox/giuda

Ask a TGS on behalf of another user without password

wh0amitz/petitpotato

Local privilege escalation via PetitPotam (Abusing impersonate privileges).

ghost-otpbot/smsotpbot

OTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...

s3cur3th1ssh1t/namedpipepth

Pass the Hash to a named pipe for token Impersonation

synacktiv/prox-ez

HTTP/HTTPS interception proxy for testing Windows authentication mechanisms, supporting NTLM, Kerberos, pass-the-hash, pass-the-ticket and relay…

zettahack/pastezort

Pastejacking - PasteZort