
ClickOnceBlobber
Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C# port of…

Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C# port of…


A python server tool based on flask , this tool can phish some Facebook credentials!

Cartero - Social Engineering Framework

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this…

HTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…

Write-up for another forgotten Windows vulnerability (0day): Microsoft Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape,…

OSINT tool for automated scanning of social networks and other websites, using a single nickname.

OSINT tool that scrapes Twitter profile metadata to analyze activity patterns, timezone, language, geolocation, hashtags, and social connections for…

Real-time phishing platform that bypasses 2FA via a live noVNC browser session, capturing cookies, saved passwords, browsing history, and downloaded…

PHP library for executing Telegram OSINT scenarios: search users, parse group members, monitor online status, download photos, and track profile…

Super organized and flexible script for sending phishing campaigns

Gophish with Malicious Attachment and HTTP redirect support


Remote operations commands implemented using Beacon Object Files

A multi-purpose OSINT toolkit with a neat web-interface.