tw-d/wifi-pineapple-mk7_evil-portalRogue access point toolkit for WiFi penetration testing, deploying evil portal phishing payloads to capture credentials and perform social…
4w4k3/umbrellaA Phishing Dropper designed to Pentest.
r3m0t3nu11/cve-2025-1015an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant…
mohwahyudi/poc-cve-2026-64638-PoC exploit chain for WordPress pre-auth XSS to RCE via DOM clobbering, REST JSONP/SOME, and plugin upload, with Docker lab verification and…
arcanum-sec/wraithBrowser-hooking framework for authorized red teams and educators. Hooks browsers via XSS, provides interactive post-exploitation control, blind-XSS…
octoberfest7/xll_phishingXLL Phishing Tradecraft
mrtuxx/socialpwnedSocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to…
initstring/linkedin2usernameOSINT Tool: Generate username lists for companies on LinkedIn
gonzosint/namechkOsint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks.
soxoj/maigret🕵️♂️ Collect a dossier on a person by username from 6K websites
crimsonforge-io/king-phisherSimulate realistic phishing campaigns with credential harvesting, email tracking, and landing page cloning for security awareness training and…
ilektrojohn/creepyA geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.
jaykali/lockphishLockphish it's the first tool (07/04/2020) for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone…
ransomleak/training-security-awarenessOpen-source interactive security awareness training library with 130+ SCORM exercises covering phishing, vishing, BEC, MFA fatigue, and OWASP AI/LLM…
artemcyberlab/project-ntlm-hash-capture-and-phishing-email-exploitation-for-cve-2024-21413Demonstrates capturing NTLM hashes via Responder and executing phishing emails exploiting CVE-2024-21413 to compromise systems.
werdhaihai/atlasreaperA command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.
