Open-Source Phishing Toolkit

一款适用于红蓝对抗中的仿真钓鱼系统

↕️🤫 Stealth redirector for your red team operation security

Domain name permutation engine written in Go

IOK (Indicator Of Kit) is an open source language and ruleset for detecting phishing threat actor tools and tactics

This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim opens the phishing link and instantly redirects them to the authentication page. No authentication method, not even FIDO, is able to protect against this type of attack.

This project aims to be a drop-in replacement for the certstream server by Calidog. This tool aggregates, parses, and streams certificate data from multiple certificate transparency logs via websocket connections to the clients.

Reverse engineered to remove IOCs, added Exchange Online Protection IP blacklist and bing-bot user-agent blocking, DNS configuration and notes on usage.

DeepSea Phishing Gear

Self hosted phishing framework

Automatically clone websites and patch them with PHP to create phishing pages

Chista | Open Threat Intelligence Framework

The simplest way to find how to report abusive domains

it is instagram phishing login page as a web application

Monitor Certificate Transparency Logs For Phishing Domains

A tool to monitor for potential spear phishing domains and send to Slack.

Typosquatting tool that supports OSINT investigations, and designed to operate on multilingual target domains.

URL / IP / Email defanging with Golang. Make IoC harmless.

Docker for the latest gophish with stealth configuration from sneaky_gophish

A tool that combines DNS and WHOIS to automatically monitor domain name changes.