FiercePhish

FiercePhish FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more. The features will continue to be expanded and will include website spoofing, click tracking, and extensiv...

operative-framework

operative framework is a digital investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules. important The project has undergone a...

king-phisher

King Phisher Phishing Campaign Toolkit King Phisher is no longer being maintained. Installation For instructions on how to install, please see the INSTALL.md file. After installing, for instructions on how to get started please see the wiki. Overview King Phisher is a tool for testing and promoti...

phishing-frenzy

Phishing Frenzy Ruby on Rails Phishing Framework Documentation & Info Relevant up to date documentation can be found on the official Phishing Frenzy website located below Phishing Frenzy Website Please submit any tickets or issues to the github issues page Phishing Frenzy Tickets To contact us...

Goreport

Goreport v3.0, a Gophish Reporting Tool This script accepts your Gophish campaign IDs as a parameter and then collects the campaign results to present the statistics and perform user-agent parsing and geolocation lookups for IP addresses. Goreport generates lists of IP addresses, operating system...

Reel

Reel Фреймворк для симуляции фишинга и повышения осведомленности о безопасности с настраиваемыми рабочими процессами, управлением кампаниями и опциональным прокси для учетных данных. Быстрый старт для эксплуатации 1. Клонируйте репозиторий и перейдите в него с помощью cd. 2. Запустите ./deploy.sh...

sharepoint-toolshell-micro-postmortem

Инцидент Микро-Постмортем — Кампания Microsoft SharePoint On-Prem “ToolShell” Этот набор инструментов проводит триаж кампании нулевого дня “ToolShell” середины 2025 года против локального Microsoft SharePoint Server; SharePoint Online не входит в область действия. Он предоставляет сквозные...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

FudgeC2

FudgeC2 FudgeC2 is a Powershell C2 platform designed to facilitate team collaboration and campaign timelining, released at BlackHat Arsenal USA 2019. This aims to help clients better understand red team activities by presenting them with more granular detail of adversarial techniques. Built on...

goCabrito

goCabrito Script super organisé et flexible pour l'envoi de campagnes d'hameçonnage. Fonctionnalités Envoie à un seul e-mail Envoie à des listes d'e-mails texte Envoie à des listes d'e-mails avec prénom et nom csv Prend en charge les pièces jointes Divise les e-mails en groupes Retarde l'envoi de...

evilgophish

Table of Contents evilgophish A Word About Sponsorship Credits Prerequisites Disclaimer Why? Background Infrastructure Layout setup.sh Cloudflare Turnstile Setup Cloudflare Turnstile HTML Template Guide replacerid.sh Email Campaign Setup QR Code Generator SMS Campaign Setup Live Feed Setup A Word...

RogueSliver

RogueSliver Une suite d'outils pour perturber les campagnes utilisant le framework C2 Sliver. Cet outil, ses utilisations et comment il a été créé seront abordés en détail sur ACEResponder.com Cet outil est destiné à des fins éducatives uniquement. | ---|--- ExtractCerts.py| Extraire les...

Log4j-Vulnerability

Vulnérabilité Log4j Tutoriel: https://youtu.be/PNDBjoT83zA Tutoriel: https://cryptodeeptech.ru/log4j-vulnerability Contexte sur Log4j L'équipe de sécurité d'Alibaba Cloud a divulgué publiquement une vulnérabilité critique CVE-2021-44228 permettant une exécution de code à distance non authentifiée...

CyberThreatIntel

CyberThreatIntel Анализ вредоносного ПО и киберразведка APT-групп и киберпреступников Сводка 2020-01-20 - Transparent Tribe APT 2020-01-03 - MAAS Terraloader 2019-12-28 - SideWinder: те же цели, те же TTPs, пора контратаковать! 2019-11-18 - APT33 продолжает нацеливаться на компании США 2019-11-12...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

openclaw-security-monitor

OpenClaw Security Monitor Surveillance de sécurité proactive, analyse des menaces et visibilité en temps réel pour les déploiements d'OpenClaw. Détecte les menaces de la campagne ClawHavoc 824+ compétences malveillantes, du voleur AMOS , de l'infostealer Vidar , du malware proxy GhostSocks , du...

JoomShaper Helix3 <=3.1.0 - Unauthenticated Arbitrary JSON File Write

JoomShaper Helix3 template framework versions 1.0 through 3.1.0 for Joomla expose an unauthenticated AJAX handler plgajaxhelix3 accessible via the Joomla comajax component. The onAjaxHelix3 plugin method processes dataaction=save requests without any authentication check or CSRF token validation...

Campaign Monitor for WordPress - Information Disclosure

Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a full path disclosure caused by improper access restriction and enabled displayerrors in /forms/views/admin/create.php, letting unauthenticated attackers retrieve server paths, exploit requires displayerrors to be...

CVE-2023-36884-MS-Office-HTML-RCE

CVE-2023-36884 : Exécution de code à distance RCE HTML dans MS Office avec des documents malveillants Le 11 juillet 2023, Microsoft a publié un correctif visant à résoudre plusieurs vulnérabilités d'exécution de code à distance RCE activement exploitées. Cette action a également mis en lumière un...

EITest-tools-scripts-IOCs

IOCs Индикаторы компрометации IOCs, обновляемые каждые 30 минут, связанные с кампаниями EITest. Домен stat-dns.com, используемый в DGA-алгоритме EITest,был переведён в режим sinkhole. В результате кампания EITest, по-видимому, прекращена с 2018-03-15. backend-decipher.py Расшифровывает данные,...