An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !
- phishing
- phisher
- phishing-attacks
- htr-tech
57,138 visible repositories in the index
1–24 of 45 · Most stars
An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !
Free cross-platform password manager compatible with KeePass
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
Password protect a static HTML page, decrypted in-browser in JS with no dependency. No server logic needed.
A guide to smart contract security best practices
Cloud-native SIEM for intelligent security analytics for your entire enterprise.
Fluxion is a remake of linset by vk496 with enhanced functionality.
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
Grab cam shots & GPS location from target's phone front camera or PC webcam just sending a link.
Generate a customized Privacy Policy and Terms of Use document for your mobile apps
Database documentation built easy
CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.
Windows Events Attack Samples
passfab-unlocker: Standalone Offline Password Recovery Solution
A collection of android Exploits and Hacks
Rails integration for Rodauth authentication framework
Documenting the unofficial and internal Steam Web API
Yet another static code analyzer for malicious Android applications
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
Drltrace is a library calls tracer for Windows and Linux applications.
Free OSINT app for Discord IDs: paste a user, server or invite and see when it was made and who it copies.
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups