Reel

Reel Marco de simulación de phishing y concienciación en seguridad con flujos de trabajo configurables, gestión de campañas y proxy de credenciales opcional. Inicio rápido USO OPS 1. Clona el repositorio y entra en él con cd. 2. Ejecuta ./deploy.sh; esto configurará los requisitos previos por ti,...

camjacking

Camjacking CamJacking es un framework de formación en concienciación sobre seguridad de nivel empresarial, diseñado para simular ataques de phishing realistas dirigidos a los permisos de cámara y a la concienciación del usuario 🎯 ¿Qué es CamJacking? CamJacking es un framework de formación en...

telegram-phish-simulator

es-define-property Object.defineProperty, but not IE 8's broken one. Example root@kitploit: const assert = require'assert'; const $defineProperty = require'es-define-property'; if $defineProperty assert.equal$defineProperty, Object.defineProperty; else if Object.defineProperty...

Phishing-Simulation

Phishing-Simulation Phishing Simulation 主要旨在通过提供直观的教程和定制化评估（无需任何实际设置——无需域名、无需基础设施、无需真实电子邮件地址）来提高人们对钓鱼的认知，评估人们在特定情况下的行动，并能够了解当前的安全意识水平。 什么是? 组织实施红队评估的目标之一是了解IT生态系统中的弱点，包括人员和网络。组织尽一切努力改善边界安全并修补发现的漏洞，但人员仍然是最薄弱的环节。钓鱼在了解员工的安全意识方面起着至关重要的作用。 Phishing Simulation 让用户无需实际执行“实时”钓鱼攻击，通过引人入胜且直观的培训环节来理解它。...

training-security-awareness

Free Security Awareness Training for Employees — Open Source Interactive SCORM Library 130+ free, open-source security awareness training exercises for employees — hands-on, interactive SCORM modules covering phishing awareness training, phishing simulation, GDPR training, EU AI Act compliance, A...

Exploit for External Control of File Name or Path in Microsoft

CVE-2025-33053 Proof Of Concept This repository provides scri...

Microsoft Defender for Office 365 named Best Email Security Service of 2023 by SE Labs

In todays world where hybrid and remote work are on the rise, and companies rely on email now more than ever, phishing remains one of the most prominent and sophisticated techniques that malicious actors utilize to attack organizations and gain access to their most sensitive information...

Microsoft Defender for Office 365 named Best Email Security Service of 2023 by SE Labs

In todays world where hybrid and remote work are on the rise, and companies rely on email now more than ever, phishing remains one of the most prominent and sophisticated techniques that malicious actors utilize to attack organizations and gain access to their most sensitive information...

Test your team’s security readiness with the Gone Phishing Tournament

Why should you care about the behavioral risk of your employees? Eighty-two percent of breaches include and often start with user behavior.1 Not all are phishing, but a majority of them are just that. Phishing is, and has been for many years, the cheapest and most reliable way for an attacker of...

What Does an Internal Attack Resulting in a Data Breach Look Like in Today’s Threat Landscape?

In my last blog, I explained why taking the approach of setting up perimeter defenses, restricting data access, patching vulnerabilities, applying sensors to data movement, and encrypting data is no longer solely effective at stopping data breaches in today’s threat landscape. I also discussed th...

Employees Make Best Frontline Phishing Defense

The cybersecurity good news and bad news about phishing attacks is employees can be an enterprise’s weakest link or strongest first line of defense. Yes, we are talking about inboxes, human nature and the increasingly sophisticated number of phishing attacks. The Federal Bureau of Investigation...

Are employees the weakest link in your security strategy? Train them!

Email is the number one threat vector. There’s no exception, even with a global pandemic, on the contrary: COVID-19 has been used as an appealing hook by cyber criminals. Data from Trend Micro Smart Protection Network shows that for the first five months of 2020, 92 per cent of all the cyber...

King Phisher 1.5.2 - Phishing Campaign Toolkit

King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...