
CredsLeaker
Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it…
penetration-testingphishing-toolsred-teaming+1
317

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it…

⛏️ The extraction engine behind Maigret: turn any profile URL into a structured OSINT record across 150+ sites

Creates Fake Auth prompt to capture users plaintext passwords

An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector

Gophish with Malicious Attachment and HTTP redirect support

Proof-of-concept exploit for CVE-2018-13257 demonstrating CAS host header spoofing in Blackboard Learn to hijack user sessions via a malicious…