Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers (Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi)

Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks

A modular Active Directory lab builder for hands-on penetration testing and security research in isolated environments.

PacketSnitch is a network analysis platform that transforms packet captures into searchable, protocol-aware intelligence, helping security professionals, developers, and researchers rapidly uncover hosts, credentials, certificates, files, locations, protocols, anomalies, threat intel, and other actionable insights.

WiFi Evil Twin Attack - Credential Harvest Tool

Python spyware that captures keystrokes, mouse inputs, screenshots & microphone audio — exfiltrates via email every 10 seconds with self-delete on discovery.

Security research and exploit development: vulnerability analysis, exploit chain implementation, post-exploitation tradecraft, and defensive assessment tooling. Covers browser engines, persistence mechanisms, credential harvesting, C2 patterns, and AI-accelerated attack automation.

Specialized toolkit designed to exploit/dump the in-memory cleartext credential in Microsoft Edge.

Tests with Network Providers DLLs, adding some extra functionality to NPPSpy2 by @gtworek

Toolkit for authorized red-team simulations on Telegram

Forensics Credential Harvester is a cross-platform tool for digital forensics professionals to extract and recover browser credentials from popular web browsers (Chrome, Firefox, Safari, Brave, and Internet Explorer).

Post-exploitation script for unelevated shells that automates path hijacking to harvest sudo credentials. Captures passwords by reflective execution and has persistence across reboots.

Weaponize .xlsx files with hidden tracking pixels and NTLMv2 hash-capture payloads via HTTP, SMB, or WebDAV — no macros, zero dependencies, pure Python.

Python script to demonstrate a Skeleton Key attack. Compiles a custom C-based PAM module to establish a universal master password for any user including root, while original credentials remain active.

ArchPhish is an advanced, Go-based penetration testing framework that bypasses two-factor authentication (2FA) using transparent reverse‑proxy techniques. It enables authorised red teams to assess an organisation's resilience against sophisticated phishing attacks by capturing credentials and session tokens in real time, even from MFA‑protected

Web traffic interception simulation tool for cybersecurity research and defensive learning in isolated lab environments.

Proof-of-concept captive portal credential harvester using create_ap and Flask.

Crafted a spoofed website login page mimicking a legitimate website and designed a phishing email to simulate credential harvesting

Cross-platform credential stealer with Sigma rules and IR playbooks.

Social Engineering awareness and phishing simulation project using SET (Social Engineering Toolkit) to analyze credential harvesting techniques and improve security awareness.