
OffensiveVBA
This repo covers some code execution and AV Evasion methods for Macros in Office documents

This repo covers some code execution and AV Evasion methods for Macros in Office documents

ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location…

Simple Windows and Linux keystroke injection tool that exfiltrates stored WiFi data (SSID and password).

A font-based deception tool for red teaming, security research, and whatever else.

Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.

Tool made to automate tasks of pentesting.

Educational phishing simulation tool that mimics OS login screens to capture credentials for cybersecurity awareness training. Supports Windows,…

Practical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…

CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…

Rogue access point tool for creating captive portals, phishing credentials via cloned login pages, and injecting malware downloads for educational…

Automated phishing simulation tool with 30+ login page templates, URL masking, and multiple tunneling options (Ngrok, Cloudflared, Serveo) for…

Security awareness training tool for authorized phishing simulations and internal IT audits

Resources to learn more about Chinese-language cybercrime actors.

A lightweight tool designed to stop clickfix attacks by using clipboard formatting with execution surface checks

This repository contains an exploit for targeting Microsoft Outlook through Exchange Online, leveraging a vulnerability to execute arbitrary code via…

Web traffic interception simulation tool for cybersecurity research and defensive learning in isolated lab environments.

CVE-2024-3094 XZ Utils backdoor research - attack surface visualiser, system vulnerability checker, and general Linux CVE assessment tool