fluxion

Fluxion ist die Zukunft von MITM-WPA-Angriffen Fluxion ist ein Remake von linset von vk496 mit hoffentlich weniger Fehlern und mehr Funktionalität. Es ist mit der neuesten Version von Kali rolling kompatibel. Die neuesten Builds stabil und Beta finden Sie hier hier...

SocialEngineering

SOCIAL ENGINEER 🎯🕵️‍♂️ Um poderoso kit de engenharia social que automatiza phishing, bombardeio de OTP/e-mail, e-mails falsos e muito mais — feito com ❤️ por @karthithehacker ⚠️ Apenas para uso educacional. Não use esta ferramenta contra ninguém sem permissão explícita. 📌 Recursos 🎯 Ataques de...

toastfix-demo

Demo di ToastFix Questo progetto dimostra come le notifiche toast di Windows, convincenti, possano essere sfruttate in attacchi di ingegneria sociale, in particolare utilizzando esche di tipo ClickFix. Una demo dal vivo è disponibile qui attacco più realistico: 👉 https://h4lpy.github.io/ Una...

PoC-CVE-2026-20841

PoC CVE-2026-20841 Beschreibung Dieses Projekt ist ein einfacher Proof of Concept PoC bezüglich einer Schwachstelle im Windows-Editor Notepad zur "Remote Code Execution". Angreifer haben die Möglichkeit, eine spezielle .md-Datei zu erstellen und durch Social-Engineering-Tricks Benutzer dazu zu...

CiclopeClic

CiclopeClic Strumento di sensibilizzazione alla sicurezza controllato dall'IA Benvenuto in CiclopeClic! 🔐 Immagina di avere il potere di generare link sicuri e personalizzati per campagne di phishing etico a portata di mano. Questo è CiclopeClic! Il nostro strumento sta rivoluzionando il modo in...

LLMReaper

Captura Passiva de Conversas com LLM e Pesquisa de Exposição de Dados Sensíveis Extensão Chromium MV3 • Captura de DOM em Tempo Real • Detecção de Segredos • Backend FastAPI !WARNING Este projeto é fornecido estritamente para pesquisa de segurança, uso educacional e fins de conscientização...

Tangled

Tangled Tangled è una piattaforma di phishing progettata da una prospettiva di sicurezza offensiva. Automatizza molti aspetti della consegna di campagne di ingegneria sociale e arma le funzionalità di rendering iCalendar in Microsoft Outlook e Gmail Google Workspace per fornire inviti di riunione...

Facad1ng

Se trovi utile questo repository GitHub, considera di lasciare una stella! ⭐️ Facad1ng è uno strumento open-source di mascheramento e analisi degli URL progettato per ricerca sulla sicurezza, consapevolezza del phishing e test difensivi. Mostra come gli avversari possano camuffare link dannosi...

cuddlephish

CuddlePhish Browser-in-the-middle BitM multiutente armato per penetration tester. Questo attacco può essere utilizzato per bypassare l'autenticazione multifattoriale su molte applicazioni web di alto valore. Funziona anche per applicazioni che non utilizzano token di sessione e che quindi non...

r4ven

Se trovi utile questo repository GitHub, considera di dargli una stella! ⭐️ ▶️ Guarda il video - Come usarlo! Questo progetto è uno strumento di ricerca e sensibilizzazione sulla sicurezza progettato per dimostrare come i browser web moderni possano esporre dati di localizzazione, accesso alla...

CVE-2026-79276

A flaw was found in Google Chrome's FileSystem component. This improper privilege management vulnerability allows a remote attacker, leveraging social engineering, to bypass system access restrictions. The exploitation occurs when a user interacts with a specially crafted HTML page...

CVE-2026-79258

A flaw was found in WebXR within Google Chrome. This incorrect authorization vulnerability allows a remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, to obtain sensitive cross-origin data. This could lead to unauthorized information disclosure...

CVE-2026-79055

A flaw was found in Google Chrome on Android. An information leak vulnerability exists in the Sharing feature. A local attacker, by leveraging social engineering tactics, could exploit this flaw through a co-installed application, potentially leading to the disclosure of sensitive information...

CVE-2026-79225

A flaw was found in chromium-browser. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. The attacker can achieve this by leveraging social engineering techniques through user interface UI interaction...

CVE-2026-79089

A flaw was found in Google Chrome's Transactions Platform on Android. A race condition vulnerability allows a remote attacker, through social engineering and a specially crafted HTML page, to bypass system access restrictions. This could lead to unauthorized access to sensitive system functions...

CVE-2026-79022

A flaw was found in Google Chrome. A remote attacker, leveraging social engineering, could exploit a user interface UI misrepresentation vulnerability. By crafting a malicious HTML page, the attacker could potentially spoof UI elements, which might mislead users...

CVE-2026-79253

A flaw was found in the Network component of Google Chrome. A remote attacker, leveraging social engineering tactics, could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This improper input validation could lead to the disclosure of sensitive information...

CVE-2026-78911

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the USB component could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation requires the attacker to first compromise the renderer process and then leverage socia...

CVE-2026-79045

A flaw was found in the V8 JavaScript engine within Chromium. A remote attacker could exploit a type confusion vulnerability by leveraging social engineering tactics and enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory within the...

CVE-2026-79041

A flaw was found in Google Chrome. A remote attacker, through social engineering, could exploit a missing authorization vulnerability to bypass the web origin policy. By convincing a user to open a specially crafted HTML page, the attacker could gain access to privileged browser pages, potentiall...