phishing-factory Goto Github PK

empire

Empire is a pure PowerShell post-exploitation agent.

evilabigail

Automated Linux evil maid attack

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

evilnetconnectionwmiprovider

flasturbate

A SWF obfuscator.

fullscreen-api-attack

Demo of phishing attack on the native HTML5 full screen API.

fuzzdb

Official FuzzDB project repository

generate-macro

This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.

glastopf

Web Application Honeypot

go-dkim

DKIM package for golang

go-msi

Easy way to generate msi package for a Go project

golang_simple_phishing_example

gone-phishing

A phishing attack for Macs that copies the victim's password and keychain to the Public folder.

gophish

Open-Source Phishing Toolkit

gwt-penetration-testing-toolset

A set of tools made to assist in penetration testing GWT applications. Additional details about these tools can be found on my OWASP Appsec DC slides available here: http://www.owasp.org/images/7/77/Attacking_Google_Web_Toolkit.ppt

harness

Interactive remote PowerShell Payload

hex4vbs

Hex-encoded VBScript Statements Pair Obfuscation & Circumvention of MSIE or Its Sister-Product IIS

hostapd-mana

SensePost's patches to hostapd for rogue access points. First presented at Defcon 22

hostapd-wpe

Modified hostapd to facilitate AP impersonation attacks

hta

Hypertext Application

hta-exploit-

Microsoft Windows HTA (HTML Application) - Remote Code Execution

html-muncher

renames classes and ids in your css, javascript, and html to save bytes and obfuscate your code

iat-hooking-revisited

Import address table (IAT) hooking is a well documented technique for intercepting calls to imported functions.

imhoneypot

Instant messenger honeypot

improvedreflectivedllinjection

An improvement of the original reflective DLL injection technique by Stephen Fewer of Harmony Security

inveigh

Inveigh is a Windows PowerShell LLMNR/NBNS spoofer/man-in-the-middle tool

invoke-altdsbackdoor

invoke-loginprompt

Invokes a Windows Security Login Prompt and outputs the clear text password.

javascript-backdoor

Learn from Casey Smith @subTee

javaunserializeexploits