钓鱼
✉️ HTML Smuggling generator&obfuscator for your Red Team operations
A builder 🔨 for binding evil program 😈 and normal document 🐣
本工具可以基于已知网站 ssl 证书的信息生成新的自签名证书,保持签发者、有效期、序列号、域名等一致,用于伪装流量。
A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX
猫猫Cs:基于Cobalt Strike[4.5]二开 (原dogcs二开移植)
利用阿里云oss对象存储,来转发http流量实现(cs)Cobalt Strike、msf 上线等 这之间利用阿里云的相关域名进行通信。
Take a screenshot without injection for Cobalt Strike
SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.
📫 An open source temporary email tool. 只需一个域名部署临时邮箱,支持多域名后缀,密码找回。
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.
Quickly upload files to aliyun OSS by aliyun-oss-csharp-sdk
A user friendly command line tool to access AliCloud OSS.
一款轻量化可定制模板的邮件批量发送工具 | 可用于攻防钓鱼或其他邮件个性化的场景 | 可启动JavaFX或SpringWeb环境