skills
specterops/skillsReusable offensive security skills and plugins for AI agents, covering reconnaissance, exploitation, C2, payload development, and reporting across…
command-and-controleducationexploitation+9
671
specterops/skillsReusable offensive security skills and plugins for AI agents, covering reconnaissance, exploitation, C2, payload development, and reporting across…
wavestone-cdt/abaddonRed team operations management platform automating infrastructure deployment, C2 setup, phishing campaigns, and reconnaissance with integrated tool…
fluxionnetwork/fluxionAutomated WPA/WPA2 phishing tool that captures handshakes, spawns a rogue access point, and lures users to a captive portal to harvest credentials…
fin3ss3g0d/evilgophishevilginx3 + gophish
fkasler/cuddlephishWeaponized Browser-in-the-Middle (BitM) for Penetration Testers
pentestgeek/phishing-frenzyRuby on Rails Phishing Framework
raikia/fiercephishFiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule…
kgretzky/evilginxPLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2
alteredsecurity/365-stealerAutomates Illicit Consent Grant attacks against Azure/O365 tenants to steal refresh tokens, exfiltrate emails/OneDrive data, and create malicious…
mattkeeley/spoofyBulk domain spoofability checker using authoritative SPF and DMARC record analysis with custom, real-world tested spoof logic and optional DKIM…
kgretzky/evilqrProof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.
4w4k3/umbrellaA Phishing Dropper designed to Pentest.
optiv/microsoft365_devicephishA proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow
kingsabri/gocabritoSuper organized and flexible script for sending phishing campaigns
nickvourd/rti-toolkitPowerShell toolkit for remote template injection attacks and defense. Injects malicious links into Office Word documents for phishing, with…
tw-d/wifi-pineapple-mk7_evil-portalRogue access point toolkit for WiFi penetration testing, deploying evil portal phishing payloads to capture credentials and perform social…
dshabani96/cve-2024-21413Proof-of-concept exploit for Microsoft Outlook RCE (CVE-2024-21413) with SMTP email delivery, malicious RTF attachment generation, and optional…