scambuster
laugiov/scambusterDefensive engagement & threat intelligence research laboratory. Converts inbound scam emails into actionable IOCs through controlled, policy-driven…
ai-securitydefensive-toolsemail-security+5
13
laugiov/scambusterDefensive engagement & threat intelligence research laboratory. Converts inbound scam emails into actionable IOCs through controlled, policy-driven…
sublime-security/sublime-rulesOpen-source YAML rule set for detecting and preventing email attacks including BEC, credential phishing, malware, and supporting threat hunting.
roxanne_ardary/emailxposeEmailXpose is an open source AI-powered email security system that detects phishing, spam, scams, malware, and social engineering attacks. It goes…
george0papasotiriou/cve-2026-11113-smtp-header-injection-in-contact-form
redbyte1337/credspyEntra ID user enumeration and auth method discovery via the public GetCredentialType API
h1ssbl1tz/blind-trust-cve-2024-21413-researchA security research tool for simulating targeted phishing campaigns using CVE-2024-21413 (Moniker Link).
kgretzky/evilginx2Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…
dhananjayasj/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability
nickvourd/rti-toolkitPowerShell toolkit for remote template injection attacks and defense. Injects malicious links into Office Word documents for phishing, with…
abc1230940/soc336-windows-ole-zero-click-rce-exploitation-detected-cve-2025-21298SOC336 - Windows OLE Zero-Click RCE Exploitation Detected (CVE-2025-21298) Walkthrough
crimsonforge-io/king-phisherSimulate realistic phishing campaigns with credential harvesting, email tracking, and landing page cloning for security awareness training and…
a-poc/redteam-toolsTools and Techniques for Red Team / Penetration Testing
fkasler/cuddlephishWeaponized Browser-in-the-Middle (BitM) for Penetration Testers
sublime-security/ics-phishing-toolkitOpen source tooling to stop ICS phishing (malicious calendar invites)
spamscanner/spamscannerSpam Scanner is a Node.js anti-spam, email filtering, and phishing prevention tool and service. Built for @ladjs, @forwardemail, @cabinjs, @breejs,…
ineesdv/tangledOpen-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.
mattkeeley/spoofyBulk domain spoofability checker using authoritative SPF and DMARC record analysis with custom, real-world tested spoof logic and optional DKIM…