
ca-clone
Scripts to clone CA certificates for use in HTTPS client attacks.

Scripts to clone CA certificates for use in HTTPS client attacks.

Proof-of-concept exploit for CVE-2023-0264 (Keycloak OIDC session hijacking) with a frontend for session_id substitution and an agent that detects…

Proof-of-concept exploit for CVE-2022-27438, demonstrating remote code execution via spoofed update server in Advanced Installer 19.3. Includes DNS…

Repository for CVE-2023-4281 vulnerability.

Repository for CVE-2023-4631 vulnerability.

Exploit for CVE-2022-4539 that spoofs X-Forwarded-For headers to bypass WordPress WAF IP-based login and logging restrictions. Includes scalable…

Repository for CVE-2023-4279 vulnerability.

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this…

Advanced per-app device / CPU / GPU spoofer for rooted Android — device profiles, per-app CPU models, prop & Android-ID spoofing, all driven by a…

Phishing simulation and awareness framework for node-based campaigns, credential capture, SMTP delivery, CAPTCHA, and optional browser credential…

CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…

This is a SMS And Call Bomber For Linux And Termux

🕵️♂️ Collect a dossier on a person by username from 3000+ sites

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Decrypt GlobalProtect configuration and cookie files.

Most Powerful Send Fake Mail Using Any Mail I'd undetectable

Windows token manipulation utility that lists, steals, and impersonates process or user tokens to execute commands as other users, leveraging…

CAPTCHA proves you're human. HATCHA proves you're not.