Reel

Reel 用于网络钓鱼模拟和安全意识培训的框架，支持可配置工作流、活动管理以及可选凭据代理。 快速开始（运维用途） 1. 克隆仓库并 cd 进入目录。 2. 运行 ./deploy.sh — 假设你在 Ubuntu 上，该脚本会为你配置好所有前置依赖。 3. 运行 ./start.sh --preload-ml。这会启动服务器并预加载我们使用的 ML 模型。 你会获得 http://localhost:8000 上的管理后台 UI 和 http://localhost:1234 上的钓鱼服务器。默认登录：admin / admin123。首次登录后请修改密码。 通过 ssh 将 8000...

camjacking

Camjacking CamJackingは、カメラの権限とユーザーの認識を標的とした現実的なフィッシング攻撃をシミュレートするように設計された、エンタープライズグレードのセキュリティ意識向上トレーニングフレームワークです。 🎯 CamJackingとは？ CamJacking は、カメラの権限とユーザーの認識を標的とした現実的なフィッシング攻撃をシミュレートするように設計された、エンタープライズグレードのセキュリティ意識向上トレーニングフレームワーク です。倫理的ハッカー、ペネトレーションテスター、セキュリティ専門家向けに構築されたCamJackingは、組織に以下を可能にします： ✅...

telegram-phish-simulator

⚠️ Telegram フィッシングシミュレーター – 教育用セキュリティツール 違法行為にこのコードを使用しないでください。 このリポジトリは、サイバーセキュリティ教育、啓発、および許可されたラボベースのテストのみを目的として構築されたシミュレーションです。 📚 目次 概要 内容 安全なラボ環境の構築 実行方法 シミュレートされた攻撃フロー 防御ガイダンス 倫理的な使用 ライセンス 🎯 概要 このプロジェクトは、以下の目的で設計された Telegram フィッシングシミュレーションを紹介します: サイバーセキュリティトレーニング、 フィッシング啓発演習、 防御研究、...

Phishing-Simulation

Phishing-Simulation Phishing Simulation은 직관적인 튜토리얼과 맞춤형 평가실제 설정 없이 - 도메인, 인프라, 실제 이메일 주소 없이를 제공하여 사람들이 주어진 상황에서 어떤 행동을 할지 평가하고 현재 인식 상태를 이해할 수 있게 함으로써 피싱 인식을 높이는 것을 주 목적으로 합니다. 무엇? 레드팀 평가를 수행하는 조직의 목표 중 하나는 사람과 네트워크를 포함한 IT 생태계의 취약점을 파악하는 것입니다. 조직은 경계 보안을 개선하고 발견된 취약점을 패치하기 위해 모든 노력을 기울이지만, 사람이 여...

training-security-awareness

Free Security Awareness Training for Employees — Open Source Interactive SCORM Library 130+ free, open-source security awareness training exercises for employees — hands-on, interactive SCORM modules covering phishing awareness training, phishing simulation, GDPR training, EU AI Act compliance, A...

Exploit for External Control of File Name or Path in Microsoft

CVE-2025-33053 Proof Of Concept This repository provides scri...

Microsoft Defender for Office 365 named Best Email Security Service of 2023 by SE Labs

In todays world where hybrid and remote work are on the rise, and companies rely on email now more than ever, phishing remains one of the most prominent and sophisticated techniques that malicious actors utilize to attack organizations and gain access to their most sensitive information...

Microsoft Defender for Office 365 named Best Email Security Service of 2023 by SE Labs

In todays world where hybrid and remote work are on the rise, and companies rely on email now more than ever, phishing remains one of the most prominent and sophisticated techniques that malicious actors utilize to attack organizations and gain access to their most sensitive information...

Test your team’s security readiness with the Gone Phishing Tournament

Why should you care about the behavioral risk of your employees? Eighty-two percent of breaches include and often start with user behavior.1 Not all are phishing, but a majority of them are just that. Phishing is, and has been for many years, the cheapest and most reliable way for an attacker of...

What Does an Internal Attack Resulting in a Data Breach Look Like in Today’s Threat Landscape?

In my last blog, I explained why taking the approach of setting up perimeter defenses, restricting data access, patching vulnerabilities, applying sensors to data movement, and encrypting data is no longer solely effective at stopping data breaches in today’s threat landscape. I also discussed th...

Employees Make Best Frontline Phishing Defense

The cybersecurity good news and bad news about phishing attacks is employees can be an enterprise’s weakest link or strongest first line of defense. Yes, we are talking about inboxes, human nature and the increasingly sophisticated number of phishing attacks. The Federal Bureau of Investigation...

Are employees the weakest link in your security strategy? Train them!

Email is the number one threat vector. There’s no exception, even with a global pandemic, on the contrary: COVID-19 has been used as an appealing hook by cyber criminals. Data from Trend Micro Smart Protection Network shows that for the first five months of 2020, 92 per cent of all the cyber...

King Phisher 1.5.2 - Phishing Campaign Toolkit

King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...