Tools

doctoreww/evilfonttool

A font-based deception tool for red teaming, security research, and whatever else.

mohwahyudi/poc-cve-2026-64638-

PoC exploit chain for WordPress pre-auth XSS to RCE via DOM clobbering, REST JSONP/SOME, and plugin upload, with Docker lab verification and…

criticalpathsecurity/zeek-intelligence-feeds

Aggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…

ceramicskate0/sharpexchange

C# Tool to interact with MS Exchange based on MS docs

logisek/azureadenumeration

Microsoft Entra ID (Azure AD) Unauthenticated Enumeration

agampreet-singh/redroot

RedRoot is a Python-based, CLI-driven offensive security framework that brings essential red teaming tools into one unified terminal environment.…

hackerxphantom/spoof_anymail

Most Powerful Send Fake Mail Using Any Mail I'd undetectable

leocottret/cve-2024-30956

(DOM-based XSS) HTML Injection vulnerability in TOWeb v.12.05 and before allows an attacker to inject HTML/JS code via the _message.html component.

h1ssbl1tz/blind-trust-cve-2024-21413-research

A security research tool for simulating targeted phishing campaigns using CVE-2024-21413 (Moniker Link).

osintnet/osintnet-public

OsintNET is a browser-based OSINT platform for domain intelligence, website risk scanning, SERP discovery, image intelligence and AI image detection.

d4op/cve-2023-51764-poc

Python 3 proof-of-concept for CVE-2023-51764 SMTP smuggling vulnerability, enabling email spoofing via crafted SMTP sessions.

absholi7ly/microsoft-edge-information-disclosure

CVE-2024-30056 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

mannansainicyber/url_checker

Hybrid ML and heuristic-based URL phishing detector with real-time analysis, explainable confidence scores, and REST API for programmatic security…

shredzwho/ig-detective

OSINT tool researched and designed to hunt down IG handles

deadshot0x7/007-thebond

This Script will help you to gather information about your victim or friend.

mharjac/bad_ducky

Rubber Ducky compatible clone based on CJMCU BadUSB HW.

ilektrojohn/creepy

A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.