This is a collection of social engineering tricks and payloads being used for credential theft and spear phishing attacks.
☆359Nov 21, 2017Updated 8 years ago
Alternatives and similar repositories for SocialEngineeringPayloads
Users that are interested in SocialEngineeringPayloads are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Social Engineering Toys☆39Feb 1, 2016Updated 10 years ago
- Collection of social engineering payloads☆296Oct 19, 2017Updated 9 years ago
- A library of pretexts to use on offensive phishing engagements.☆398Aug 9, 2019Updated 7 years ago
- Quick Malicious ClickOnceGenerator for Red Team☆275Jan 27, 2021Updated 5 years ago
- Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software…☆198Nov 19, 2017Updated 8 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Malicious Macro Generator☆830Apr 17, 2019Updated 7 years ago
- Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.☆634Jul 16, 2023Updated 3 years ago
- Embed and hide any file in an HTML file☆490Sep 27, 2017Updated 9 years ago
- Turn a normal PDF file into malicious.Use to steal Net-NTLM Hashes from windows machines.☆346Apr 17, 2021Updated 5 years ago
- An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector☆1,023Sep 11, 2017Updated 9 years ago
- morphHTA - Morphing Cobalt Strike's evil.HTA☆531Apr 14, 2023Updated 3 years ago
- Cobalt Strike SCT payload obfuscator☆144Jul 7, 2017Updated 9 years ago
- The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool…☆1,123Feb 10, 2021Updated 5 years ago
- This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several dif…☆449Nov 30, 2023Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective wa…☆312Sep 10, 2018Updated 8 years ago
- WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application cont…☆349Aug 27, 2018Updated 8 years ago
- A PowerShell based utility for the creation of malicious Office macro documents.☆1,109Nov 3, 2017Updated 9 years ago
- A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.☆323Jun 5, 2017Updated 9 years ago
- Rapid Attack Infrastructure (RAI)☆311Nov 24, 2024Updated last year
- Search for categorized domain☆465Jan 15, 2019Updated 7 years ago
- C# Targeted Attack Reconnissance Tools☆120Jan 11, 2021Updated 5 years ago
- DKMC - Dont kill my cat - Malicious payload evasion tool☆1,419Jul 20, 2020Updated 6 years ago
- Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.☆938May 8, 2019Updated 7 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- The PowerThIEf, an Internet Explorer Post Exploitation library☆127Feb 27, 2025Updated last year
- HTA encryption tool for RedTeams☆1,432Nov 9, 2022Updated 3 years ago
- macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other f…☆2,305Aug 15, 2024Updated 2 years ago
- CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA token…☆1,396May 22, 2020Updated 6 years ago
- Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.☆176Sep 18, 2018Updated 8 years ago
- When CactusTorch meets WebDavDelivery and obfuscation☆63Sep 19, 2017Updated 9 years ago
- CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM.☆637Oct 16, 2018Updated 8 years ago
- Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.☆508Aug 6, 2019Updated 7 years ago
- PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)☆326Mar 26, 2019Updated 7 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- SharpBox is a C# tool for compressing, encrypting, and exfiltrating data to DropBox using the DropBox API.☆109Jan 20, 2021Updated 5 years ago
- ☆17Jul 26, 2018Updated 8 years ago
- ☆519Aug 11, 2023Updated 3 years ago
- Port of Invoke-Excel4DCOM☆101Oct 12, 2019Updated 7 years ago
- Run PowerShell command without invoking powershell.exe☆1,562Apr 9, 2026Updated 6 months ago
- The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into a…☆378Nov 19, 2024Updated last year
- Lateral Movement technique using DCOM and HTA☆232Oct 18, 2022Updated 4 years ago