Facad1ng

If you find this GitHub repo useful, please consider giving it a star! ⭐️ Facad1ng is an open-source URL masking and analysis tool designed for security research, phishing awareness, and defensive testing. It demonstrates how adversaries may disguise malicious links using URL manipulation and...

wifiphisher

About Wifiphisher is a rogue Access Point framework for conducting red team engagements or Wi-Fi security testing. Using Wifiphisher, penetration testers can easily achieve a man-in-the-middle position against wireless clients by performing targeted Wi-Fi association attacks. Wifiphisher can be...

zphisher

A beginners friendly, Automated phishing tool with 30+ templates. Disclaimer Any actions and or activities related toZphisher is solely your responsibility. The misuse of this toolkit can result in criminal charges brought against the persons in question. The contributors will not be held...

O365-Doppelganger

O365-Doppelganger O365-Doppelganger is NOT a replacement for hardcore phishing activities. There are several other tools which perform OAuth and OTA capture which is not the aim of O365-Doppelganger. O365-Doppelganger is a quick handy script to harvest credentials of a user during Red Teams. This...

fluxion

Fluxion is the future of MITM WPA attacks Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with hopefully fewer bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target access point by means of a social...

class_struggle

Class Struggle Repository accompanying the "Class Struggle" article. The repository demonstrates use of an autoencoder for detecting domains similar to a known subset of phishing domains published by CERT Polska. Data Sources CERT Polska Warning List This project uses data from the CERT Polska...

TeamsPhisher

... :-++++++=-. .=+++++++++++- .++++++++++++++= :------: :-:--. :+++++++++++++++. .---------- = .-+. :+++++++++++++++. -----------: := :. :--------------------------=++++++++- .------------ .=+ ++ ----------------------------++++++-. :+=-----===: -+-.+: :---------------------------++++=-...

HTMLSmuggler

HTMLSmuggler ✉️ HTMLSmuggler - JS payload generator for IDS bypass and payload delivery via HTML smuggling. Description The full explanation what is HTML Smuggling may be found here. The primary objective of HTML smuggling is to bypass network security controls, such as firewalls and intrusion...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation bundle install Current Algorithms...

mihari

mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...

XLL_Phishing

XLLPhishing Introduction With Microsoft's recent announcement regarding the blocking of macros in documents originating from the internet email AND web download, attackers have began aggressively exploring other options to achieve user driven access UDA. There are several considerations to be...

phishcollector

PhishCollector PhishCollector is a research framework for collecting, analysing, and tracking phishing sites. It is intentionally designed as a starting point — the detection rules, technology signatures, wordlists, and plugins are all plain data structures that researchers are expected to read,...

young-domain-guard

🛡️ Young Domain Guard A browser extension that alerts you when visiting websites with recently registered domain names. 🤔 Why? Phishing and scam domains are created and abandoned constantly — most live less than a month before being taken down and replaced. Traditional blacklists can't keep up...

wifi-agent

wifi-agent wifi-agent Rogue access point. The program is made for educational purposes only for to see how the rogue access point method works. Any unnecessary use of the program is prohibited and the manufacturer has no responsibility for any illegal use by anyone. Use the tool at your own risk...

Fudge

Fudge I had some success with on Phishing engagements by base64 encoding the contents of a file, putting it into a HTML file and having it decode and drop when the user opened the HTML file. Usage There are precompiled binaries available on the releases tab for both Windows 64-bit and Linux 64-bi...

SocialFish

SocialFish v3.0 Modern Dynamic Phishing Toolkit SocialFish v3.0 brings powerful new features for cloning modern login pages, capturing cookies, and intercepting 2FA codes with a live operator panel. 🆕 What's New in v3.0 Playwright Browser Automation — Clone modern JS-heavy login pages Full Cookie...

Chinese-Cybercrime-Research

Chinese Cybercrime Research Resources to learn more about Chinese-language cybercrime actors. Phishing Phishing Kits YYlaiyu https://cloud.google.com/blog/topics/threat-intelligence/chinese-language-phishing-services https://spycloud.com/blog/yylaiyu-chinese-phishing-as-a-service-panel/...

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

ai-email-threat-research

Threat Terminal A cybersecurity research game measuring how humans detect AI-generated phishing emails. Built as a retro terminal experience. Live: research.scottaltiparmak.com The Problem AI can now generate phishing emails with perfect grammar, flawless spelling, and convincing context. The old...

OpenCATS - Open Redirect

OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations. id: CVE-2023-27292 info: name:...