A framework for OAuth 2.0 device code authentication grant flow phishing
☆47May 31, 2023Updated 3 years ago
Alternatives and similar repositories for phishsticks
Users that are interested in phishsticks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ADFS Brute-Force Login Script☆11Mar 19, 2024Updated 2 years ago
- leaking net-ntlm with webdav☆28Feb 23, 2021Updated 5 years ago
- Self delete DLL (2)☆14Feb 15, 2024Updated 2 years ago
- Microsoft365 Device Code Phishing Framework☆39Sep 4, 2021Updated 5 years ago
- Leveraging GitHub Actions to rotate IP addresses during password spraying attacks to bypass IP-Based blocking☆153May 23, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆38Apr 15, 2025Updated last year
- PoC Exploit for CVE-2023-35803 Unauthenticated Buffer Overflow in Aerohive HiveOS/Extreme Networks IQ Engine☆23Jul 12, 2023Updated 3 years ago
- Azure Post Exploitation Framework☆248Oct 27, 2025Updated 11 months ago
- A short scraper looking for a POC of CVE-2024-49112☆14Dec 16, 2024Updated last year
- Modified version of PEAS client for offensive operations☆16Mar 8, 2021Updated 5 years ago
- CallBack-Techniques for Shellcode execution ported to Nim☆61Mar 19, 2021Updated 5 years ago
- This project is created for research into antivirus evasion by unhooking.☆18Sep 2, 2021Updated 5 years ago
- ☆148Oct 31, 2023Updated 2 years ago
- Tutorial covering how to discover DLLs for Hijacking and how to create proxy DLLS using Microsoft Teams as an example☆15Apr 7, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- (Sim)ulate (Ba)zar Loader☆28Nov 15, 2020Updated 5 years ago
- Shellcode Loader Utilizing ETW Events☆65Feb 26, 2025Updated last year
- Password attacks and MFA validation against various endpoints in Azure and Office 365☆153Feb 10, 2023Updated 3 years ago
- Metasploit Post-Exploitation Gather module for Exchange Server☆26Mar 26, 2021Updated 5 years ago
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆121May 2, 2024Updated 2 years ago
- A Python POC for CRED1 over SOCKS5☆173Oct 5, 2024Updated last year
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago
- A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP☆37Jul 27, 2021Updated 5 years ago
- Some of my custom "tools".☆28Feb 21, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…☆68Dec 29, 2023Updated 2 years ago
- PoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping☆37May 12, 2026Updated 4 months ago
- Sustainable shellcode evasion☆119May 13, 2026Updated 4 months ago
- ☆56Jun 28, 2025Updated last year
- Abusing Azure services over C2☆382Jan 20, 2026Updated 8 months ago
- Python3 tool to perform password spraying using RDP☆17Aug 14, 2023Updated 3 years ago
- C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!☆181Aug 4, 2021Updated 5 years ago
- Abuse leaked token handles.☆136Dec 14, 2023Updated 2 years ago
- ForsHops☆156Mar 25, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Docker container escape enumeration tool.☆12Jan 23, 2021Updated 5 years ago
- Unauthenticated start EFS service on remote Windows host (make PetitPotam great again)☆150Oct 23, 2025Updated 11 months ago
- Modify managed functions from unmanaged code☆53Feb 1, 2024Updated 2 years ago
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆66Mar 19, 2024Updated 2 years ago
- ClickForClickOnce - Generate configurable clickonce payloads☆97Apr 17, 2026Updated 5 months ago
- Automated (kinda) deployment of MalRDP infrastructure with Terraform & Ansible☆12Sep 15, 2023Updated 3 years ago
- Fast multithreaded multiplatform password spraying tool designed for easy use. Supports webhooks, jitter, delay, files, rotation, backend…☆42Sep 9, 2024Updated 2 years ago