
ODIN
Automated network asset, email, and social media profile discovery and cataloguing.

Automated network asset, email, and social media profile discovery and cataloguing.

A collection of awesome penetration testing resources, tools and other shiny things

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security…

A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.

Practical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…

Automated phishing campaign toolset that spawns dedicated AWS EC2 instances with integrated PhishingFrenzy and BeEF, plus subdomain discovery and…

Phishing simulation and awareness framework for node-based campaigns, credential capture, SMTP delivery, CAPTCHA, and optional browser credential…

A practical chain that starts with an innocuous PDF file and ends up in a reverse shell on an AWS EC2 instance

Serverless AITM Simulation Framework for Entra ID and M365

Proof-of-concept exploit for CVE-2018-13257 demonstrating CAS host header spoofing in Blackboard Learn to hijack user sessions via a malicious…