securityfirst/umbrella_androidOpen source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with…
davenisc/thief_raccoonEducational phishing simulation tool that mimics OS login screens to capture credentials for cybersecurity awareness training. Supports Windows,…
jenyraval/phishing-simulationPhishing Simulation mainly aims to increase phishing awareness by providing an intuitive tutorial and customized assessment
malwarecube/enhanced-iframe-protectionA lightweight extension to automatically detect and provide verbose warnings for embedded iframe elements in order to protect against…
s0ld13rr/claude-code-backdoorBackdooring Claude Code via hooks in settings.json. Authorized use only!
naimkowshik/lbfhAbout All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
jofpin/sackIdentify connection of sessions for social engineering attacks.
mthbernardes/houseproxyProtect your parents from phishing
hackinglz/ip-obfuscationGenerates obfuscated IP addresses and URLs using DWORD, octal, hex, IPv6-mapped, and fake-domain @ tricks for penetration testing, phishing…
hydradragonantivirus/hydradragonav-mobileAndroid Antivirus which doesn't require root, adb, ca install and cloud with many features and ways to detect more zero-day malware
lxance-hacker/lxancephisherAutomated phishing simulation tool with 30+ login page templates, URL masking, and multiple tunneling options (Ngrok, Cloudflared, Serveo) for…
h4lpy/toastfix-demoProof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with…
humansecurity/cve-2019-18426CVE-2019-18426 disclosure repository detailing Open Redirect, CSP Bypass, Persistent XSS, and FS read permissions in WhatsApp, with technical…
boredchilada/clickfix-simulator-2025A lightweight, self-hosted simulation tool for "ClickFix" (ClearFake) social engineering training. Safely simulates clipboard-injection attacks with…
nehkark/cve-2025-40778Proof-of-concept demonstrating DNS cache poisoning via additional record injection in BIND 9, with tools to validate and exploit CVE-2025-40778 for…
scottalt/ai-email-threat-researchA cybersecurity research game measuring how humans detect AI-generated phishing emails. Built as a retro terminal experience.
marinafabregat/cve-2025-41088Stored Cross-Site Scripting (XSS) in Xibo Signage's Xibo CMS v4.1.2, due to a lack of proper validation of user input.
