
SocialFish
Modern dynamic phishing toolkit for authorized red team exercises. Clones login pages, captures credentials, cookies, and 2FA codes with a live…
command-and-controleducationids-ips-evasion+9

Modern dynamic phishing toolkit for authorized red team exercises. Clones login pages, captures credentials, cookies, and 2FA codes with a live…

BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation

Cobalt Strike BOF that spawns a process using another user's token and injects Beacon shellcode, enabling post-exploitation and lateral movement via…

Living Under the Land on Linux ~ Bsides Belfast/Vienna 2025

A Proof-of-concept repository showing how an untrusted MCP server can steal literally everything...