Tools

ustayready/credsniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

dionach/phemail

PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test

oscarakaelvis/cve-2018-8062

Persistent XSS on Comtrend AR-5387un router

kgretzky/evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…

mrd0x/bitb

HTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…

kgretzky/evilginx

PLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2

xaitax/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

fkasler/cuddlephish

Weaponized Browser-in-the-Middle (BitM) for Penetration Testers

kgretzky/evilqr

Proof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.

wyatu/cve-2018-8581

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

random-robbie/cve-2020-0688

cve-2020-0688

nccgroup/outlookleaktest

The Outlook HTML Leak Test Project

0neb1n/cve-2020-16947

PoC of CVE-2020-16947 (Microsoft Outlook RCE vulnerablility)

petrusviet/cve-2021-39115

Template Injection in Email Templates leads to code execution on Jira Service Management Server

sofianeelhor/cve-2023-22621-poc

CVE-2023-22621: SSTI to RCE by Exploiting Email Templates affecting Strapi Versions <=4.5.5

themehackers/cve-2024-21413

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC

arjunindia/fb-phisher-python

A python server tool based on flask , this tool can phish some Facebook credentials!

srvaccount/cve-2021-26855-poc

PoC exploit code for CVE-2021-26855