hac01/azure-pentesting-suiteGo toolkit for authorized Azure security assessments: enumerates subscriptions and resources, audits misconfigurations, and attacks public Blob…
fluxionnetwork/fluxionAutomated WPA/WPA2 phishing tool that captures handshakes, spawns a rogue access point, and lures users to a captive portal to harvest credentials…
bettercap/bettercapThe Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
wifiphisher/wifiphisherRogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…
toxy4ny/bl00dym4ryEducational trojan simulator for cybersecurity training, simulating phishing attacks with social engineering, system reconnaissance, anti-sandbox…
viralmaniar/i-see-youISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location…
greshake/llm-securityProof-of-concept demos and research on indirect prompt injection attacks against application-integrated LLMs, covering data exfiltration, remote…
pushsecurity/browser-identity-attacks-matrixOffensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they…
alteredsecurity/365-stealerAutomates Illicit Consent Grant attacks against Azure/O365 tenants to steal refresh tokens, exfiltrate emails/OneDrive data, and create malicious…
mrbrutti/carteroModular phishing framework with CLI for cloning sites, sending templated emails, and launching phishing campaigns via email, SMS, iMessage, and…
ilianazz/young-domain-guardBrowser extension that warns users about recently registered domains to prevent phishing attacks. Queries RDAP to check domain age and displays…
ahrixia/cve-2024-57428CVE-2024-57428: PHPJabbers Cinema Booking System v2.0 suffers from stored XSS, enabling persistent JavaScript injection for phishing and malware…
sobri3195/pegasus-neoPEGASUS-NEO is a comprehensive penetration testing framework designed for security professionals and ethical hackers. It combines multiple security…
elceef/dnstwistDomain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
s0lst1c3/eaphammerTargeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.
jaykali/lockphishLockphish it's the first tool (07/04/2020) for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone…
darkarp/chromepassChromepass - Hacking Chrome Saved Passwords
4w4k3/umbrellaA Phishing Dropper designed to Pentest.
