Phishing Email Template Pack
Pack of 25 professional phishing email templates: Microsoft 365, Google Workspace, banking, shipping, HR notifications.
Arsenal
Professional offensive security tools & exploit frameworks
120
Tools
12
Categories
Evilginx2 Phishlet Collection
12 custom phishlets for Evilginx2: Microsoft 365, Google, Okta, AWS Console, GitHub, LinkedIn, and more. MFA bypass via session hijacking.
Pretexting Scenario Builder
Documentation framework for building social engineering pretexts. 15 base scenarios with conversation scripts and decision trees.
Voice Phishing (Vishing) Toolkit
Scripts and tools for vishing campaigns: caller ID spoofing, call recording, conversation scripts, and fake IVR.
USB Drop Attack Payloads
Collection of payloads for USB drop attacks: Rubber Ducky scripts, BadUSB firmware, and autorun payloads for Windows/Mac/Linux.
LinkedIn OSINT & Spear Phishing Module
LinkedIn reconnaissance module for identifying employees, roles, technologies, and building personalized spear phishing.
QR Code Phishing Generator
Malicious QR code generator for quishing: WiFi credential capture, URL redirect, vCard injection, and payment redirect.
Browser-in-the-Browser (BitB) Attack Kit
Kit for creating pixel-perfect fake login windows inside the browser. Simulates OAuth popups from Google, Microsoft, Apple, Facebook.
Physical Penetration Testing Checklist
Complete operational guide for physical pentesting: tailgating, lock picking, badge cloning, dumpster diving, and documentation.
Deepfake Audio Generator for Vishing
AI voice cloning tool for advanced vishing operations. Clones voice with 30 seconds of reference audio.
CVE-2024-6387 RegreSSHion PoC
Functional exploit for the RegreSSHion vulnerability in OpenSSH <9.8. Race condition in SSHD's signal handler allowing pre-auth RCE.
Apache Path Traversal Exploit (CVE-2021-41773)
Exploit for path traversal in Apache HTTP Server 2.4.49-2.4.50. Allows reading arbitrary files and RCE with mod_cgi enabled.