
RunPE
C# Reflective loader for unmanaged binaries.

C# Reflective loader for unmanaged binaries.

Advanced Phishing tool

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

Automated Instagram credential brute-forcing tool with CPU/GPU support, designed for password guessing attacks against target accounts using Chrome…

Simulate realistic phishing campaigns with credential harvesting, email tracking, and landing page cloning for security awareness training and…

Automates vishing calls via Discord bot and API to intercept SMS one-time passwords, bypassing SMS verification for PayPal, Google, Instagram, and 3D…

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers


HTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…

A windows token impersonation tool

A simple script to generate a hidden url for social engineering.

RunasCs - Csharp and open version of windows builtin runas.exe

Advanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…

Pass the Hash to a named pipe for token Impersonation

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

Practical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…