Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers (Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi)
Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks
A modular Active Directory lab builder for hands-on penetration testing and security research in isolated environments.
Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harvesting
WiFi Evil Twin Attack - Credential Harvest Tool
Python spyware that captures keystrokes, mouse inputs, screenshots & microphone audio — exfiltrates via email every 10 seconds with self-delete on discovery.
Fully autonomous web crawler and Attack Surface Management (ASM) engine for security testing. Maps endpoints, parameters, and vulnerabilities across SPAs and traditio
Security research and exploit development: vulnerability analysis, exploit chain implementation, post-exploitation tradecraft, and defensive assessment tooling. Covers browser engines, persistence mechanisms, credential harvesting, C2 patterns, and AI-accelerated attack automation.
Specialized toolkit designed to exploit/dump the in-memory cleartext credential in Microsoft Edge.
Tests with Network Providers DLLs, adding some extra functionality to NPPSpy2 by @gtworek
Forensics Credential Harvester is a cross-platform tool for digital forensics professionals to extract and recover browser credentials from popular web browsers (Chrome, Firefox, Safari, Brave, and Internet Explorer).
Toolkit for authorized red-team simulations on Telegram
Weaponize .xlsx files with hidden tracking pixels and NTLMv2 hash-capture payloads via HTTP, SMB, or WebDAV — no macros, zero dependencies, pure Python.
Web traffic interception simulation tool for cybersecurity research and defensive learning in isolated lab environments.
Proof-of-concept captive portal credential harvester using create_ap and Flask.
Crafted a spoofed website login page mimicking a legitimate website and designed a phishing email to simulate credential harvesting
Cross-platform credential stealer with Sigma rules and IR playbooks.
Post-exploitation script for unelevated shells that automates path hijacking to harvest sudo credentials. Captures passwords by reflective execution and has persistence across reboots.
Python script to demonstrate a Skeleton Key attack. Compiles a custom C-based PAM module to establish a universal master password for any user including root, while original credentials remain active.
Social Engineering awareness and phishing simulation project using SET (Social Engineering Toolkit) to analyze credential harvesting techniques and improve security awareness.
To associate your repository with the credential-harvesting topic, visit your repo's landing page and select "manage topics."