urlcrazy
urbanadventurer/urlcrazyGenerate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.
dns-analysisinformation-gatheringosint+2
692
urbanadventurer/urlcrazyGenerate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.
tokyoneon/credphishPowerShell script that invokes legitimate credential prompts and exfiltrates captured passwords over DNS using CredentialPicker and Resolve-DnsName.
jumpseclabs/tokenflareServerless AITM Simulation Framework for Entra ID and M365
makdosx/wifi-agentRogue access point tool for creating captive portals, phishing credentials via cloned login pages, and injecting malware downloads for educational…
corvralabs/evilnekoAutomated container orchestration tool for Browser-in-the-Browser (BITB) phishing attacks, enabling red teams to scale multi-target infrastructure…
pericena/ciclopeclicSecurity awareness training tool for authorized phishing simulations and internal IT audits
boredchilada/clickfix-simulator-2025A lightweight, self-hosted simulation tool for "ClickFix" (ClearFake) social engineering training. Safely simulates clipboard-injection attacks with…
qyvora/qyvora-toha3eeGo-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…
tw-d/wifi-pineapple-mk7_evil-portalRogue access point toolkit for WiFi penetration testing, deploying evil portal phishing payloads to capture credentials and perform social…
polarisxsec/cve-2024-21413Educational lab demonstrating CVE-2024-21413 exploitation in Outlook to leak NTLM hashes via malicious UNC links, with custom SMTP/POP3…
yass2400012/email-exploit-moniker-link-cve-2024-21413-Proof-of-concept exploit for CVE-2024-21413 using Moniker Link in HTML email to trigger SMB connection and capture netNTLMv2 hashes via Responder.…
simplerhacking/evilginx3-phishletsThis repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use…
jaykali/lockphishLockphish it's the first tool (07/04/2020) for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone…
d4vinci/dr0p1t-frameworkA framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
mandiant/reelphishReal-time two-factor phishing tool that automates credential harvesting by intercepting credentials from a phishing site and submitting them to the…
sherlock-project/sherlockHunt down social media accounts by username across social networks
jaykali/maskphishIntroducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.