social-engineering

Fluxion is a remake of linset by vk496 with enhanced functionality.

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

Hacking resources and cheat sheets. References, tools, scripts, tutorials, and other resources that help offensive and defensive security professionals.

A curated list of awesome social engineering resources.

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

Introducing masking URL technology to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.

Handbook of information collection for penetration testing and src

Generate Professional Phishing Emails Fast And Easy

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.

Phishing on Twitter

Tool social engineering [Access Webcam & Microphone & Os Password Grabber & Location Finder] With Ngrok

An open source batch script based WiFi Passview for Windows!

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to find possible credentials leaks in PwnDB.

Tool made to automate tasks of pentesting.

BoobSnail allows generating Excel 4.0 XLM macro. Its purpose is to support the RedTeam and BlueTeam in XLM macro generation.

Your Social Engineering Sidekick

"Socialx" is a Social Engineering And Remote Access Trojan Tool. You can generate fud backdoor and you can embed any file you want inside of the exe file.

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

Open-Source Collection of Social Engineering Pretexts

Using Social Engineering To Obtain WiFi Passwords

Automated rogue access point setup tool.

A simple phishing tool that can phish almost any website

Argus Advanced Remote & Local Keylogger For macOS and Windows

CredsStealer allows an attacker to craft a highly convincing credentials prompt using Windows PromptForCredential, validate it against the DC or localmachine and in turn leak it via an HTTP request.

📚 Overview 🔒 Tooling 🔒 Process 🔒 Physical 🔒 People 📚

使用Go语言编写的社工字典生成器(The social engineering dictionary generator written by Go)

Actively maintained first-aid box for investigators, pentesters, journalists, red team and many more peep from various fields.

Python Program to obfuscate URLs to make Phishing attacks more difficult to detect. Uses Active open redirect list and other URL obfuscation techniques.