artemcyberlab/project-ntlm-hash-capture-and-phishing-email-exploitation-for-cve-2024-21413Demonstrates capturing NTLM hashes via Responder and executing phishing emails exploiting CVE-2024-21413 to compromise systems.
husam212/mitmerAutomated man-in-the-middle attack tool.
mrd0x/webview2-cookie-stealerInjects JavaScript keylogger into WebView2 pages to capture keystrokes and exfiltrate cookies from Microsoft authentication sessions via HTTP GET…
trustedsec/social-engineer-toolkitThe Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
techchipnet/camphishGrab cam shots & GPS location from target's phone front camera or PC webcam just sending a link.
criticalpathsecurity/zeek-intelligence-feedsAggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…
d4rks3c-group/hiddeneyerebornHiddenEye Reborn in better shape than ever, rewritten from scratch and adapted to modern world
jpcertcc/phishurl-listPhishing URL dataset from JPCERT/CC
ghost-otpbot/smsotpbotOTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...
chrismaddalena/goreportA Python script to collect campaign data from Gophish and generate a report
securityfirst/umbrella_androidOpen source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with…
paranoidninja/o365-doppelgangerA quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user
rubenformation/ms-photos_ntlm_leakNew 0 day vulnerability allowing to leak NTLM hashes from browsers with one click
redhuntlabs/antisquatAI-powered typosquatting and phishing domain detector using NLP and ChatGPT to generate domain permutations and extract contact information from…
mthbernardes/houseproxyProtect your parents from phishing
star-sg/random-scriptsCollection of DFIR and OSINT Python scripts for parsing malicious LNK samples, extracting OLE objects from MHTML, and hashing favicons to hunt…
v35hr4j/cve-2021-24563The plugin does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing…
ahrixia/cve-2024-57428CVE-2024-57428: PHPJabbers Cinema Booking System v2.0 suffers from stored XSS, enabling persistent JavaScript injection for phishing and malware…
