fundacio-i2cat/infohoundInfoHound is an OSINT to extract a large amount of data given a web domain name.
husam212/mitmerAutomated man-in-the-middle attack tool.
digitalmethodsinitiative/dmi-tcatDigital Methods Initiative - Twitter Capture and Analysis Toolset
aniket2912/all-cehv13-module-wise-pdf-reportsPractical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…
tw-d/wifi-pineapple-mk7_evil-portalRogue access point toolkit for WiFi penetration testing, deploying evil portal phishing payloads to capture credentials and perform social…
fluxionnetwork/fluxionAutomated WPA/WPA2 phishing tool that captures handshakes, spawns a rogue access point, and lures users to a captive portal to harvest credentials…
enaqx/awesome-pentestA collection of awesome penetration testing resources, tools and other shiny things
agampreet-singh/redrootRedRoot is a Python-based, CLI-driven offensive security framework that brings essential red teaming tools into one unified terminal environment.…
artemcyberlab/project-ntlm-hash-capture-and-phishing-email-exploitation-for-cve-2024-21413Demonstrates capturing NTLM hashes via Responder and executing phishing emails exploiting CVE-2024-21413 to compromise systems.
furqankhan1/cve-2019-13496Proof-of-concept exploit demonstrating OTP bypass in One Identity Cloud Access Manager 8.1.3 via MITM/SSL-strip, SAML response replay, and injected…
wifiphisher/wifiphisherRogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…
ghost-otpbot/smsotpbotOTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...
undeadsec/socialfishModern dynamic phishing toolkit for authorized red team exercises. Clones login pages, captures credentials, cookies, and 2FA codes with a live…
e-m-e-k-a/moniker-link-lab-setupPenetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft, including attack execution, hash cracking,…
mrk336/cve-2021-3456A practical chain that starts with an innocuous PDF file and ends up in a reverse shell on an AWS EC2 instance
visualbasic6/chatterinternet monitoring osint telegram bot for windows
smicallef/spiderfootAutomates OSINT data collection and analysis for threat intelligence, attack surface mapping, and reconnaissance. Integrates 200+ modules for DNS,…