Tools

khr0x40sh/macroshop

Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.

hoodoer/js-tap

JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and…

v4d1/spoofthatmail

Bash script to check if a domain or list of domains can be spoofed based in DMARC records

dviros/rat-via-telegram

Windows Remote Post Breach Tool via Telegram

hackerxphantom/spoof_anymail

Most Powerful Send Fake Mail Using Any Mail I'd undetectable

sakurasamuraii/cve-2021-43032

Post authenticated stored-xss in XenForo versions ≤ 2.2.7

am0nt31r0/password-analysis

Script in Go that analyzes a list of passwords based on in its entropy and weak passwords from a dictionary. Useful for penetration tests and…

sevagas/macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for…

ultrasecurity/storm-breaker

Social engineering tool [Access Webcam & Microphone & Location Finder] With {Py,JS,PHP}

octoberfest7/teamsphisher

Send phishing messages and attachments to Microsoft Teams users

klezvirus/vortex

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

d00mfist/mystikal

macOS Initial Access Payload Generator

ecstatic-nobel/osweep

Don't Just Search OSINT. Sweep It.

00xglitch/bella

Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎💻

nccgroup/outlookleaktest

The Outlook HTML Leak Test Project

chrismaddalena/cooper

A Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns.

kingsabri/gocabrito

Super organized and flexible script for sending phishing campaigns