Reel

Reel 用于网络钓鱼模拟和安全意识培训的框架，支持可配置工作流、活动管理以及可选凭据代理。 快速开始（运维用途） 1. 克隆仓库并 cd 进入目录。 2. 运行 ./deploy.sh — 假设你在 Ubuntu 上，该脚本会为你配置好所有前置依赖。 3. 运行 ./start.sh --preload-ml。这会启动服务器并预加载我们使用的 ML 模型。 你会获得 http://localhost:8000 上的管理后台 UI 和 http://localhost:1234 上的钓鱼服务器。默认登录：admin / admin123。首次登录后请修改密码。 通过 ssh 将 8000...

camjacking

Camjacking Camjacking 是一款企业级安全意识培训框架，旨在模拟针对摄像头权限和用户意识开展逼真的钓鱼攻击。 🎯 什么是 CamJacking？ CamJacking 是一款企业级安全意识培训框架 ，旨在模拟针对摄像头权限和用户意识开展的逼真钓鱼攻击。该工具专为道德黑客、渗透测试人员和安全专业人员打造，能够帮助组织： ✅ 评估 员工的安全意识水平及对社会工程的易感性 ✅ 培训 团队掌握摄像头安全风险及最佳实践 ✅ 模拟 在受控实验室环境中开展逼真的攻击场景 ✅ 衡量 借助详细的分析和报告来评估安全态势 ✅ 教育 通过动手实践的网络安全培训提升能力 🚨 免责声明...

Phishing-Simulation

Phishing-Simulation Phishing Simulation mainly aims to increase phishing awareness by providing an intuitive tutorial and customized assessment without any actual setup - no domain, no infrastructure, no actual email address to assess people's action on any given situation and gives ability to...

telegram-phish-simulator

⚠️ Telegram Phishing Simulator – Educational Security Tool DO NOT USE THIS CODE FOR ILLEGAL ACTIVITIES. This repository is a simulation built for cybersecurity education, awareness, and authorized lab-based testing only. 📚 Table of Contents About Contents Safe Lab Setup How to Run Simulated Attack...

training-security-awareness

Formazione gratuita sulla sicurezza informatica per i dipendenti — Libreria SCORM interattiva open source Oltre 130 esercizi gratuiti e open source di formazione sulla sicurezza informatica per i dipendenti — moduli SCORM pratici e interattivi che coprono formazione sulla consapevolezza del...

Exploit for External Control of File Name or Path in Microsoft

CVE-2025-33053 Proof Of Concept This repository provides scri...

Microsoft Defender for Office 365 named Best Email Security Service of 2023 by SE Labs

In todays world where hybrid and remote work are on the rise, and companies rely on email now more than ever, phishing remains one of the most prominent and sophisticated techniques that malicious actors utilize to attack organizations and gain access to their most sensitive information...

Microsoft Defender for Office 365 named Best Email Security Service of 2023 by SE Labs

In todays world where hybrid and remote work are on the rise, and companies rely on email now more than ever, phishing remains one of the most prominent and sophisticated techniques that malicious actors utilize to attack organizations and gain access to their most sensitive information...

Test your team’s security readiness with the Gone Phishing Tournament

Why should you care about the behavioral risk of your employees? Eighty-two percent of breaches include and often start with user behavior.1 Not all are phishing, but a majority of them are just that. Phishing is, and has been for many years, the cheapest and most reliable way for an attacker of...

What Does an Internal Attack Resulting in a Data Breach Look Like in Today’s Threat Landscape?

In my last blog, I explained why taking the approach of setting up perimeter defenses, restricting data access, patching vulnerabilities, applying sensors to data movement, and encrypting data is no longer solely effective at stopping data breaches in today’s threat landscape. I also discussed th...

Employees Make Best Frontline Phishing Defense

The cybersecurity good news and bad news about phishing attacks is employees can be an enterprise’s weakest link or strongest first line of defense. Yes, we are talking about inboxes, human nature and the increasingly sophisticated number of phishing attacks. The Federal Bureau of Investigation...

Are employees the weakest link in your security strategy? Train them!

Email is the number one threat vector. There’s no exception, even with a global pandemic, on the contrary: COVID-19 has been used as an appealing hook by cyber criminals. Data from Trend Micro Smart Protection Network shows that for the first five months of 2020, 92 per cent of all the cyber...

King Phisher 1.5.2 - Phishing Campaign Toolkit

King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...