
WhatsMyName
Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.

Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.

camjacking templates

A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.

Most Powerful Send Fake Mail Using Any Mail I'd undetectable

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification…

CVE-2021-46366: Credential Bruteforce Attack via CSRF + Open Redirect in Magnolia CMS

EmailXpose is an open source AI-powered email security system that detects phishing, spam, scams, malware, and social engineering attacks. It goes…

telegram bug that discloses user's hidden phone number (still unpatched) (exploit included)

Demonstrates capturing NTLM hashes via Responder and executing phishing emails exploiting CVE-2024-21413 to compromise systems.

ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location…

Python script that acts like the original sudo binary to fool users into entering their passwords

Automated WPA/WPA2 phishing tool that captures handshakes, spawns a rogue access point, and lures users to a captive portal to harvest credentials…

JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and…

Creates Fake Auth prompt to capture users plaintext passwords

Send phishing messages and attachments to Microsoft Teams users

OSINT tool to track and correlate user identities across multiple social media platforms using username search, API integrations, and deanonymization…

PHP library for executing Telegram OSINT scenarios: search users, parse group members, monitor online status, download photos, and track profile…

Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.