DLLPasswordFilterImplant

DLLPasswordFilterImplant DLLPasswordFilterImplant is a custom password filter DLL that allows the capture of a user's credentials. Each password change event on a domain will trigger the registered DLL in order to exfiltrate the username and new password value prior successfully changing it in th...

Responder

Responder Responder is a LLMNR, NBT-NS, and MDNS poisoner with built-in rogue authentication servers for HTTP, SMB, MSSQL, FTP, LDAP, Kerberos, DNS, and more. It supports NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP, and various authentication methods across 15+ protocols. Table of Contents...

thief_raccoon

Thief Raccoon - Herramienta de Phishing para Inicio de Sesión Thief Raccoon es una herramienta diseñada con fines educativos para demostrar cómo se pueden realizar ataques de phishing en varios sistemas operativos. Esta herramienta tiene como objetivo crear conciencia sobre las amenazas de...

Inveigh

Inveigh Inveigh is a cross-platform .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers. This repo contains the primary C version as well as the legacy PowerShell version. Overview Inveigh conducts spoofing attacks and hash/credential captures through both packet sniffing and protoc...

CredSniper

CredSniper Overview Benefits Basic Usage Installation Screenshots Gmail Module Maintainer Contributing Overview Easily launch a new phishing site fully presented with SSL and capture credentials along with 2FA tokens using CredSniper. The API provides secure access to the currently captured...

ARP-poisoning-packet-sniffer

ARP Poisoning - Packet Sniffer Two scripts written to perform ARP poisoning on target computers on the same network and to monitor network traffic. The arpspoofy.py script is used to perform ARP poisoning on a target computer on the same network. While the arpspoofy.py script performs ARP poisoni...

hostapd-mana

hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...

pyrdp

PyRDP PyRDP es una herramienta y librería de protocolo de escritorio remoto RDP Monster-in-the-Middle MITM en Python. Cuenta con varias herramientas: RDP Monster-in-the-Middle Registra credenciales en texto plano o hashes NetNTLM usados al conectar Roba datos copiados al portapapeles Guarda una...

wifiphisher

Acerca de Wifiphisher es un framework de Punto de Acción falso para realizar compromisos de equipos rojos o pruebas de seguridad Wi-Fi. Usando Wifiphisher, los probadores de penetración pueden lograr fácilmente una posición de hombre en el medio MitM contra clientes inalámbricos mediante la...

ChromeAlone

ChromeAlone - Un Framework C2 para Navegador ¿Qué me aporta esto? ChromeAlone es un implante de navegador que puede utilizarse en lugar de los implantes convencionales como Cobalt Strike o Meterpreter. Este repositorio proporciona un proceso de compilación sencillo que generará una consola de...

Koh

Koh Koh is a C and Beacon Object File BOF toolset that allows for the capture of user credential material via purposeful token/logon session leakage. Some code was inspired by Elad Shamir's Internal-Monologue project no license, as well as KB180548. For why this is possible and Koh's approeach, s...

net-creds

Thoroughly sniff passwords and hashes from an interface or pcap file. Concatenates fragmented packets and does not rely on ports for service identification. Screenshots --- Sniffs URLs visited POST loads sent HTTP form logins/passwords HTTP basic auth logins/passwords HTTP searches FTP...

ESP-RFID-Tool

ESP-RFID-Tool Por Corey Harding Sitio web oficial: www.rfid-tool.com April Brother está fabricando actualmente este hardware y se puede comprar directamente desde China a través de su Tienda Oficial: https://blog.aprbrother.com/product/esp-rfid-tool Tienda AliExpress:...

fluxion

Fluxion es el futuro de los ataques MITM WPA Fluxion es una reescritura de linset por vk496 con con suerte menos errores y más funcionalidad. Es compatible con la última versión de Kali rolling. Las últimas compilaciones estable y beta se pueden encontrar aquí aquí...

lab-SMB-responder-CVE-2024-21413

SMB Lab + Responder CVE-2024-21413 🎯 Objective This project aimed to study the CVE-2024-21413 MonikerLink vulnerability, exploring how the SMB/NTLM protocol can be abused for credential capture. Even after the official Microsoft patch, the lab shows that the concept remains valid in internal...

chuckle

Chuckle - Un script automatizado de retransmisión SMB. Chuckle requiere algunas herramientas para funcionar: SMBRelayX.py Veil última versión desde git Responder Chuckle detectará qué versión estás usando. Nmap Nbtscan unixwiz MSFconsole El uso es bastante simple, ejecútalo como root o con sudo:...

CVE-2026-49364

An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during the initial cluster connection handshake. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommend...

EUVD-2026-75248

An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during the initial cluster connection handshake. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommend...

DEBIAN-CVE-2026-87872

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

SSHintel

SSHintel — Lightweight SSH Honeypot SSHintel is a lightweight SSH honeypot built using Python and Paramiko. It simulates a fake Linux shell to log unauthorized access attempts, capture credentials, and analyze attacker behavior in a controlled environment. 🔧 Features Logs SSH login attempts with...