shaheeryasirofficial/SmuggleMyPayload

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).

Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

The all-in-one browser extension for offensive security professionals 🛠

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

🔱 [ Phishing Simulation Made Easy ] 🔱. Simple and beginner friendly automated phishing simulation page creator.

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains.

xss-payload-list