jukelennings

holehe

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

rogueapps

When good OAuth apps go rogue. Documents observed OAuth application tradecraft

BLTools

[BLTools] Best Logs Cookies Checker by boyring

AITMWorker

Proof of concept: using a Cloudflare worker for AITM attacks

evilgophish

evilginx3 + gophish

HackBrowserData

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

SharpChromium

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

deviceCode2SecurityKey

PoC to add a security key to Entra ID via device code phishing

SWArevealer

EvilSlackbot

A Slack bot phishing framework for Red Teaming exercises

OktaPostExToolkit

power-pwn

An offensive security toolset for Microsoft 365 focused on Microsoft Copilot, Copilot Studio and Power Platform

saas-attacks

Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown