
Sooty
The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.

Advanced Phishing tool

Advanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…

A python server tool based on flask , this tool can phish some Facebook credentials!

Real-time two-factor phishing tool that automates credential harvesting by intercepting credentials from a phishing site and submitting them to the…

Modlishka. Reverse Proxy.

Rogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…

Tools and Techniques for Red Team / Penetration Testing

HTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…

Simulate realistic phishing campaigns with credential harvesting, email tracking, and landing page cloning for security awareness training and…

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

Automates phishing and post-phishing activities with an almost-transparent reverse proxy that dynamically mirrors target web apps and interacts with…

An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector

OTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...

Modular phishing framework with CLI for cloning sites, sending templated emails, and launching phishing campaigns via email, SMS, iMessage, and…