
FakeAuth
Creates Fake Auth prompt to capture users plaintext passwords

Creates Fake Auth prompt to capture users plaintext passwords

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it…

Proof-of-concept exploit for CVE-2018-13257 demonstrating CAS host header spoofing in Blackboard Learn to hijack user sessions via a malicious…

Gophish with Malicious Attachment and HTTP redirect support

A lightweight tool designed to stop clickfix attacks by using clipboard formatting with execution surface checks

⛏️ The extraction engine behind Maigret: turn any profile URL into a structured OSINT record across 150+ sites

An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector

Information Protection & OSINT resources | 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗