
SharpNamedPipePTH
Pass the Hash to a named pipe for token Impersonation

Pass the Hash to a named pipe for token Impersonation

Pass the Hash to a named pipe for token Impersonation

Exploit toolkit for AD CS CVE-2026-54121: low-privileged domain users impersonate a Domain Controller, forge certificates, and compromise the domain…

Proof-of-concept exploit for CVE-2023-0264 (Keycloak OIDC session hijacking) with a frontend for session_id substitution and an agent that detects…

CVE-2021-46067 - In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

This script helps to pass through the captive portals in public Wi-Fi networks. It hijacks IP and MAC from somebody who is already connected and…

Simple shell script to "clone" X.509 certificates

This is a SMS And Call Bomber For Linux And Termux

🕵️♂️ Collect a dossier on a person by username from 6K websites

Modlishka. Reverse Proxy.

HTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…

Real-time deepfake toolkit for penetration testing of identity verification and video conferencing systems. Supports face swap, image animation, and…

Simulate realistic phishing campaigns with credential harvesting, email tracking, and landing page cloning for security awareness training and…

RunasCs - Csharp and open version of windows builtin runas.exe

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

Phishing with a fake reCAPTCHA

Clone and import Chromium cookies and passwords across browsers with offline DPAPI state key decryption, supporting AES-256 GCM encrypted databases…