Tools

jeet-ganguly/birdy-edwards

Automated AI powered Facebook intelligence tool for target profiling, network analysis and threat reporting. Runs entirely on-device via Ollama.…

azhariramadhan/cve-2026-39047

Printer exploitation framework for security testing via raw port 9100, featuring PCL payload delivery, DoS bombing, C2 QR codes, phishing QR codes,…

toxy4ny/bl00dym4ry

Educational trojan simulator for cybersecurity training, simulating phishing attacks with social engineering, system reconnaissance, anti-sandbox…

mrbrutti/cartero

Modular phishing framework with CLI for cloning sites, sending templated emails, and launching phishing campaigns via email, SMS, iMessage, and…

muraenateam/muraena

Automates phishing and post-phishing activities with an almost-transparent reverse proxy that dynamically mirrors target web apps and interacts with…

0x4meliorate/mimic

Frameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic…

doctoreww/evilfonttool

A font-based deception tool for red teaming, security research, and whatever else.

trustedsec/cs-remote-ops-bof

Remote operations commands implemented using Beacon Object Files

byt3bl33d3r/spamchannel

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

guallagang508/smsbotbypass

otp bot

oriyomi12/otp-bot

Automates vishing calls via Discord bot and API to intercept SMS one-time passwords, bypassing SMS verification for PayPal, Google, Instagram, and 3D…

johnhammond/recaptcha-phish

Phishing with a fake reCAPTCHA

codesiddhant/jasmin-ransomware

Jasmin Ransomware is an advanced red team tool (WannaCry Clone) used for simulating real ransomware attacks. Jasmin helps security researchers to…

nccgroup/droppedconnection

Emulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.

ianxtianxt/flash-player

flash钓鱼源码 中文+英文

cappricio-securities/camjacking

CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…

cappricio-securities/socialengineering

SEt framework

boredchilada/clickfix-simulator-2025

A lightweight, self-hosted simulation tool for "ClickFix" (ClearFake) social engineering training. Safely simulates clipboard-injection attacks with…