
TLDHunt
Bash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…

Bash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…

Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4

ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location…

Python script that acts like the original sudo binary to fool users into entering their passwords

A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.

JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and…

Send phishing messages and attachments to Microsoft Teams users

POC CVE-2025-26318

Most Powerful Send Fake Mail Using Any Mail I'd undetectable

Inject code and spy on wifi users

Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.