artemcyberlab/project-ntlm-hash-capture-and-phishing-email-exploitation-for-cve-2024-21413Demonstrates capturing NTLM hashes via Responder and executing phishing emails exploiting CVE-2024-21413 to compromise systems.
kgretzky/evilginx2Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…
a-poc/redteam-toolsTools and Techniques for Red Team / Penetration Testing
drk1wi/modlishkaModlishka. Reverse Proxy.
mrd0x/bitbHTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…
kgretzky/evilginxPLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2
muraenateam/muraenaAutomates phishing and post-phishing activities with an almost-transparent reverse proxy that dynamically mirrors target web apps and interacts with…
fkasler/cuddlephishWeaponized Browser-in-the-Middle (BitM) for Penetration Testers
ryhanson/phisheryAn SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector
kgretzky/evilqrProof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.
azizaltuntas/camelishingSocial Engineering Tool
secureworks/squarephishAdvanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…
ghost-otpbot/smsotpbotOTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...
ineesdv/tangledOpen-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.
optiv/microsoft365_devicephishA proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow
0x4meliorate/mimicFrameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic…
rub-nds/johnny-you-are-firedArtifacts for the USENIX publication.
delivr-to/detectionsA home for detection content developed by the delivr.to team
