Tools

steved3/kit_hunter

A basic phishing kit scanner for dedicated and semi-dedicated hosting

siv-nick/whocord

Scans Discord links across mutual guilds to extract profiles, cross‑references 700+ sites, searches usernames with 30+ tools, and generates an…

jh00nbr/phishruffus

Intelligent threat hunter and phishing servers

kingsabri/gocabrito

Super organized and flexible script for sending phishing campaigns

mattiaalessi/phantom-keylogger

Phantom Keylogger is an advanced, stealth-enabled keystroke and visual intelligence gathering system.

makdosx/wifi-agent

Rogue access point tool for creating captive portals, phishing credentials via cloned login pages, and injecting malware downloads for educational…

reverseclabs/cve-2021-25374_samsung-account-access

This script can be used to gain access to a victim's Samsung Account if they have a specific version of Samsung Members installed on their Samsung…

jakabakos/cve-2023-36884-ms-office-html-rce

MS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploit

nickvourd/rti-toolkit

PowerShell toolkit for remote template injection attacks and defense. Injects malicious links into Office Word documents for phishing, with…

cosmic-zip/witchcraft

WITCHCRAFT is a cyberdeck toolkit built for runners who dive deep into the mesh. It’s your all-in-one rig for data-ghosting, ICE-breaking, and…

kira2040k/redbloodc2

Node.js command-and-control server with FUD payload generation, encrypted communication, session management, and modules for data exfiltration and…

olizimmermann/phishcollector

PhishCollector is a research framework for collecting, analysing, and tracking phishing sites.

alchemist3dot14/cve-2025-2783

Simulated PoC for CVE-2025-2783 — a sandbox escape vulnerability in Chrome's Mojo IPC. Includes phishing delivery, memory fuzzing, IPC simulation,…

lxance-hacker/lxancephisher

Automated phishing simulation tool with 30+ login page templates, URL masking, and multiple tunneling options (Ngrok, Cloudflared, Serveo) for…

pericena/ciclopeclic

Security awareness training tool for authorized phishing simulations and internal IT audits

onvio/gophish

Gophish with Malicious Attachment and HTTP redirect support

youmulijiang/evil-winrar

evil-winrar,CVE-2023-38831漏洞利用和社会工程学攻击框架 (evil-winrar, CVE-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework)

nu11secur1ty/vulnerable-pdf

Educational PDF files demonstrating client-side exploitation techniques, including calculator execution and directory browsing, for security testing…