artemcyberlab/project-ntlm-hash-capture-and-phishing-email-exploitation-for-cve-2024-21413Demonstrates capturing NTLM hashes via Responder and executing phishing emails exploiting CVE-2024-21413 to compromise systems.
a-poc/redteam-toolsTools and Techniques for Red Team / Penetration Testing
threatexpress/domainhunterChecks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
specterops/skillsReusable offensive security skills and plugins for AI agents, covering reconnaissance, exploitation, C2, payload development, and reporting across…
certtools/intelmqIntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
ring0lab/catphishCATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM.
initstring/evil-ssdpSpoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.
cldrn/macphishGenerates malicious Office for Mac macros with beacon, credential harvesting, and meterpreter payloads for phishing and exploitation testing on macOS.
brmkit/toastnotify-bofabusing windows toast notifications for fun and user manipulation
svdwi/blueboxOpen-source threat intelligence platform for malware and observable analysis. Enriches IPs, domains, URLs, and hashes with external sources, performs…
nictjh/threatdemosComprehensive Android security vulnerability demonstrations featuring CVE-2017-13156 (Janus), broadcast receiver exploitation, external storage…
artur-augustyniak/class_struggleAutoencoder-based anomaly detection for identifying phishing domains using CERT Polska warning list data, with Jupyter notebooks for research and…
ahrixia/cve-2024-57428CVE-2024-57428: PHPJabbers Cinema Booking System v2.0 suffers from stored XSS, enabling persistent JavaScript injection for phishing and malware…
sublime-security/sublime-rulesSublime rules for email attack detection, prevention, and threat hunting.
0n1con3/fluxerFluxER - The bash script which installs and runs the Fluxion tool inside Termux. The wireless security auditing tool used to perform WPA/WPA2…
trufflesecurity/of-corsAutomated CORS misconfiguration discovery tool using typosquatting domains and browser service workers to probe internal networks of bug bounty…
bushidouk/abused-legitimate-servicesCloud, CDN, and marketing services leveraged by cybercriminals and APT groups
