
Chamemask
Fake identity generator. 102 countries, one HTML file, no setup.

Fake identity generator. 102 countries, one HTML file, no setup.

PoC of the phishing through setting browser in the fullscreen mode

CVE-2024-4367 is a critical vulnerability (CVSS 9.8) in PDF.js, allowing arbitrary JavaScript code execution due to insufficient type checks on the…

Proof-of-concept exploit for CVE-2026-20841, a Windows Notepad remote code execution vulnerability, using a crafted .md file and social engineering…

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

Leak NTLM via Website tab in teams via MS Office

Phishing with a fake reCAPTCHA

Emulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.

Remote DLL hijack exploit for Real Player (CVE-2022-32291) using malicious DLLs from WebDAV/SMB shares to achieve code execution.

CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…

camjacking templates

PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary file write and RCE via crafted EPUB.…

Ruby on Rails Phishing Framework

Automated man-in-the-middle attack tool.

Facebook brute forcer script

PwnSTAR (Pwn SofT-Ap scRipt) - for all your fake-AP needs!

Remote Administration Tool for Android devices