


Injects JavaScript keylogger into WebView2 pages to capture keystrokes and exfiltrate cookies from Microsoft authentication sessions via HTTP GET…


Detects active domain mutations to prevent phishing and smishing. Uses IANA TLDs, blockchain DNS validation, and DoH malware reports. Outputs JSON or…

Intelligent threat hunter and phishing servers

Leak NTLM via Website tab in teams via MS Office

Detect visually similar characters (homoglyphs) and hidden data in text to protect against deceptive attacks

Cross-Site Scripting vulnerability in Advanced REST Client v.17.0.9 exploit

An evil RAT (Remote Administration Tool) for macOS / OS X.

Real-time phishing platform that bypasses 2FA via a live noVNC browser session, capturing cookies, saved passwords, browsing history, and downloaded…

OSINT tool that detects domain squatting, typosquatting, and phishing look-alikes by monitoring newly registered domains against brand keywords with…

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

PenBox - A Penetration Testing Framework - The Tool With All The Tools , The Hacker's Repo

HiddenEye Reborn in better shape than ever, rewritten from scratch and adapted to modern world

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

Find phishing kits which use your brand/organization's files and image.