
sherlock
Hunt down social media accounts by username across social networks

Hunt down social media accounts by username across social networks

real time face swap and one-click video deepfake with only a single image

Modlishka. Reverse Proxy.

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule…

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

Bash script to check if a domain or list of domains can be spoofed based in DMARC records

Persistent XSS on Comtrend AR-5387un router

PLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2

ntlm relay attack to Exchange Web Services

Windows credential harvester that displays a fake logon screen, validates captured passwords against AD or local machine, and outputs them to console…

In LetterPress plugin <= 1.2.1 is vulnerable to Html Injection Vulnerability which can futher leads to Open Redirection Vulnerabilty.

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it…

Samples Phishing tools made for Linux it contains 30 different type of Phishing Pages made with flask

The plugin, used as a companion for the Discy and Himer themes, does not sanitise and escape a parameter on its reset password form which makes it…

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

Azure JWT Token Manipulation Toolset

PowerShell proof-of-concept for CVE-2023-23397 that exploits Outlook's ReminderSoundFile property to intercept Net-NTLMv2 hashes via SMB or WebDAV…