dunderhay / phishsticks
A framework for OAuth 2.0 device code authentication grant flow phishing
☆44Updated last year
Alternatives and similar repositories for phishsticks:
Users that are interested in phishsticks are comparing it to the libraries listed below
- A tool for carrying out brute force attacks against Office 365, with built in IP rotation use AWS gateways.☆77Updated 10 months ago
- Microsoft365 Device Code Phishing Framework☆36Updated 3 years ago
- Generate password spraying lists based on the pwdLastSet-attribute of users.☆55Updated last year
- ☆27Updated last year
- Automatically create an operation log of your shell! Supports Linux (Bash/Zsh) and Windows (PowerShell/CMD).☆31Updated last month
- ☆43Updated 9 months ago
- ShadowForge Command & Control - Harnessing the power of Zoom's API, control a compromised Windows Machine from your Zoom Chats.☆47Updated last year
- A PoC weaponising CustomXMLPart for hiding malware code inside of Office document structures.☆37Updated 2 years ago
- badger-builder is an AI-assisted tool for generating dynamic Brute Ratel C4 profiles☆54Updated 4 months ago
- Create PDFs with HTML smuggling attachments that save on opening the document.☆29Updated last year
- dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-facto…☆41Updated 11 months ago
- A havoc UI python module to help in reporting and vulnerabilities to exploit on an internal network.☆12Updated last year
- Impacket pre-compiled binaries☆15Updated last year
- an Improoved Version of 0xNinjaCyclone´s EarlyCascade Code☆18Updated last month
- Terms of Use Conditional Access M365 Evilginx Phishlet☆31Updated this week
- ☆49Updated 5 months ago
- Lifetime AMSI bypass.☆35Updated 9 months ago
- A BOF tool that can be used to collect passwords using CredUIPromptForWindowsCredentialsName.☆13Updated 2 years ago
- Discord C2 Profile for Mythic☆28Updated last month
- ☆71Updated last year
- Situational Awareness script to identify how and where to run implants☆49Updated 4 months ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆33Updated 10 months ago
- Leveraging AWS Lambda Function URLs for C2 Redirection☆31Updated last year
- fully async implementation of Dirkjan's ROADTools☆31Updated last month
- Automated Evilginx phishlet creator Extension for Burpsuite☆48Updated 3 months ago
- Your Skyfall Infrastructure Pack☆66Updated last week
- ☆41Updated last week
- Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…☆25Updated last year
- Brief writeup of post exploitation methodologies.☆18Updated last year
- Info related to the Outflank training: Microsoft Office Offensive Tradecraft☆52Updated 11 months ago