Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers (Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi)
Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks
Modular, checkpoint-resumable scripts that build a vulnerable Active Directory lab (ad.lab forest) for authorized pentesting practice. One PowerShell script per VM, idempotent across reboots. Authorized testing only.
Python spyware that captures keystrokes, mouse inputs, screenshots & microphone audio — exfiltrates via email every 10 seconds with self-delete on discovery.
Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harvesting
Security research and exploit development: vulnerability analysis, exploit chain implementation, post-exploitation tradecraft, and defensive assessment tooling. Covers browser engines, persistence mechanisms, credential harvesting, C2 patterns, and AI-accelerated attack automation.
WiFi Evil Twin Attack - Credential Harvest Tool
Fully autonomous web crawler and Attack Surface Management (ASM) engine for security testing. Maps endpoints, parameters, and vulnerabilities across SPAs and traditio
Toolkit for authorized red-team simulations on Telegram
Specialized toolkit designed to exploit/dump the in-memory cleartext credential in Microsoft Edge.
Tests with Network Providers DLLs, adding some extra functionality to NPPSpy2 by @gtworek
Forensics Credential Harvester is a cross-platform tool for digital forensics professionals to extract and recover browser credentials from popular web browsers (Chrome, Firefox, Safari, Brave, and Internet Explorer).
Weaponize .xlsx files with hidden tracking pixels and NTLMv2 hash-capture payloads via HTTP, SMB, or WebDAV — no macros, zero dependencies, pure Python.
Web traffic interception simulation tool for cybersecurity research and defensive learning in isolated lab environments.
Proof-of-concept captive portal credential harvester using create_ap and Flask.
SentryOmni-X is an advanced red-teaming framework featuring live site cloning, universal credential sniffing, device metadata tracking, and real-time dual-camera (front/back) capture. Powered by an automated Express backend and seamless Cloudflared/Ngrok multi-tunnel support, it unifies recon into a single script.
Crafted a spoofed website login page mimicking a legitimate website and designed a phishing email to simulate credential harvesting
Cross-platform credential stealer with Sigma rules and IR playbooks.
Python script to demonstrate a Skeleton Key attack. Compiles a custom C-based PAM module to establish a universal master password for any user including root, while original credentials remain active.
Post-exploitation script for unelevated shells that automates path hijacking to harvest sudo credentials. Captures passwords by reflective execution and has persistence across reboots.
To associate your repository with the credential-harvesting topic, visit your repo's landing page and select "manage topics."