Tools

drk1wi/modlishka

Modlishka. Reverse Proxy.

fluxionnetwork/fluxion

Automated WPA/WPA2 phishing tool that captures handshakes, spawns a rogue access point, and lures users to a captive portal to harvest credentials…

toxy4ny/bl00dym4ry

Educational trojan simulator for cybersecurity training, simulating phishing attacks with social engineering, system reconnaissance, anti-sandbox…

priyankvadaliya/hack-captive-portal

This script helps to pass through the captive portals in public Wi-Fi networks. It hijacks IP and MAC from somebody who is already connected and…

s1ckb0y1337/tokenplayer

Manipulating and Abusing Windows Access Tokens.

kgretzky/evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…

ultrasecurity/storm-breaker

Social engineering tool [Access Webcam & Microphone & Location Finder] With {Py,JS,PHP}

muraenateam/muraena

Automates phishing and post-phishing activities with an almost-transparent reverse proxy that dynamically mirrors target web apps and interacts with…

azizaltuntas/camelishing

Social Engineering Tool

ianxtianxt/flash-player

flash钓鱼源码 中文+英文

ytkoka/impersonate-proxy

A local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…

wifiphisher/wifiphisher

Rogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…

mrbrutti/cartero

Modular phishing framework with CLI for cloning sites, sending templated emails, and launching phishing campaigns via email, SMS, iMessage, and…

ghost-otpbot/smsotpbot

OTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...

0x4meliorate/mimic

Frameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic…

quentinhardy/pytmipe

Python library and client for token manipulations and impersonations for privilege escalation on Windows

dionach/phemail

PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test