Open-source alternatives to CamPhish

This project is an offensive security toolkit and development framework for creating memory-safe malware, network scanners, and payload generators. It provides a structured approach to developing exploits, shellcode, and remote access tools. The framework distinguishes itself through the use of no-standard-library environments to generate minimal standalone machine code and shellcode. It also supports the compilation of high-performance logic into WebAssembly for the creation of deceptive web interfaces used in social engineering. Capability areas cover automated vulnerability discovery via

Vue Native is a framework that compiles Vue.js single-file components into React Native primitives, enabling developers to build native iOS and Android applications using Vue syntax. At its core, it provides a build-time compiler that transforms Vue components into React components, while hooking Vue's dependency-tracking reactivity system into React's component lifecycle to trigger re-renders when observed data changes. The framework wraps React Native's native module bridge so Vue components can access device APIs through Vue's reactivity system, and maps Vue's component syntax to React Nat

AntiZhaPian is a social engineering framework and fraud simulation application. It generates fake security center dashboards and anti-fraud interfaces designed to deceive users into believing that official security software is installed. The project functions as a simulation tool that mimics the visual appearance and behavior of anti-fraud applications. It uses template-based rendering and state-driven UI simulation to create synthetic dashboards with dynamic dates and fake status indicators. The application includes a user profile management interface for viewing and updating personal accou

tunnelto is a network tunneling tool that creates a public URL to forward traffic to a locally running web server, making it accessible from anywhere. It provides a way to expose local development servers to the internet through temporary or persistent public endpoints. The project supports authenticating tunnel connections with an API key to prevent unauthorized access, and allows reserving custom subdomains so the public URL remains stable across sessions. It also enables debugging webhook integrations by forwarding incoming requests to a local server for inspection during development, and

AllHackingTools is a security tool orchestrator and suite designed to install, update, and manage a wide array of third-party hacking and security utilities from a single command interface. It functions as a centralized hub for network analysis, open source intelligence, penetration testing, and social engineering tools. The project provides specialized frameworks for gathering open source intelligence and searching for user profiles across social platforms. It includes toolkits for network reconnaissance, vulnerability scanning, and the execution of security exploits, as well as a social eng

Expose is a secure tunneling tool that creates public URLs for local development servers, making them accessible from the internet without complex network configuration. It forwards incoming HTTP requests and responses between a public relay server and a local machine, enabling external services to reach a development environment that would otherwise be isolated behind a firewall or VPN. The project distinguishes itself through a comprehensive set of webhook debugging and inspection capabilities. It captures all incoming webhook requests and displays them in a real-time dashboard or command-l

Expose is a PHP-based tunneling service and local environment proxy that exposes local servers to the internet via public URLs. It provides a secure way to share development previews and test APIs without deploying to a remote server. The project is distinguished by its support for self-hosted tunneling infrastructure, allowing users to deploy a private server for full control over data and network configuration. It includes a dedicated HTTP webhook debugger for capturing, inspecting, and replaying incoming requests to verify system behavior in a local environment. The toolset covers network

This is the official documentation repository for Raspberry Pi hardware and software. It covers the complete range of Raspberry Pi single-board computers, the RP-series microcontrollers, and the Raspberry Pi operating system. The documentation provides reference material for setting up devices, configuring hardware, and using the system for tasks including AI inference, camera and video capture, embedded development, and remote access. The documentation covers the full boot chain from the GPU firmware and EEPROM bootloader through to kernel loading, with detailed guidance on boot configuratio

Nexphisher is a command-line security utility and social engineering simulation framework designed for capturing credentials during authorized security audits. It functions as a tool for credential harvesting and penetration testing to evaluate organizational resilience against phishing attacks. The system orchestrates the deployment of realistic login pages and integrates network tunneling to expose local web servers to the public internet. This allows for remote security testing and the execution of controlled social engineering simulations. The framework provides capabilities for template

react-native-image-picker is a cross-platform mobile media picker used to select images and videos from a system gallery or capture new media via the device camera. It serves as a native device camera interface and a mobile gallery file picker for accessing local storage. The library includes a media metadata extractor to retrieve technical details from selected files, such as image dimensions, file size, video duration, and EXIF data. The project provides a bridge between JavaScript and native mobile operating systems to trigger system-provided gallery and camera interfaces. It handles the

Trape is a browser-based remote access tool and exploit framework designed for gathering device geolocation, hardware profiles, and network data. It functions as an open-source intelligence platform and a system for executing custom scripts and triggering browser vulnerabilities to capture credentials or monitor device activity. The project features a real-time geolocation tracker capable of retrieving precise physical coordinates and monitoring individual movement, including silent acquisition that bypasses standard location prompts. It further provides a network tunneling service to make lo

TakePhoto is an Android media capture framework and image processing library designed to manage photo acquisition and manipulation. It provides a toolkit for capturing new images via the device camera and selecting existing images from the system gallery or local file storage. The framework distinguishes itself through automatic activity and session state restoration, which recovers the capture process after the system recycles an activity. It also includes a unified handler for managing runtime media permissions for camera and storage access across different Android versions. The library co

react-native-image-crop-picker is a cross-platform mobile image picker for selecting, cropping, and capturing images and videos from a device gallery or camera. It serves as a bridge to access the mobile camera and photo library to upload media files into an application. The library provides integrated tools for media cropping and compression, allowing images to be resized to specific dimensions or aspect ratios. It supports a unified workflow where images can be cropped immediately during the selection process. Capability areas include camera media capture, gallery media selection for singl

ImagePicker is a mobile image picker library that provides a user interface for selecting, rotating, and cropping images from a device gallery or camera. It includes a multi-image selection interface that allows users to pick one or multiple photos up to a specified limit. The library features a customizable image loader interface, allowing the replacement of default system image retrieval with third-party loading libraries. It also includes an image cropping tool for trimming photos into custom rectangular or circular shapes with precise dimensions and aspect ratios. The project covers medi

Storm-Breaker is a browser-based surveillance toolkit designed to silently capture sensor data from visitors without their knowledge or consent. It combines device fingerprinting, network-based geolocation tracking, and WebRTC exploitation to access a remote device’s camera, microphone, and system information without triggering native permission prompts. The toolkit achieves this by leveraging legacy browser APIs and network-based geolocation (IP, Wi-Fi) that do not require explicit user permission. It abuses WebRTC and media stream APIs to activate camera and microphone streams, while also c

This project is a collection of instructional resources and manuals providing strategic defense frameworks for protecting cryptocurrency assets and digital identities. It serves as a security guide for mitigating blockchain-based exploits, managing digital wallets, and implementing risk frameworks to prevent the theft of digital assets. The documentation provides detailed handbooks on wallet security, including the management of private keys, the use of hardware wallets, and secure transaction signing. It offers specialized guidance on anti-phishing defense and the identification of social en

Übersicht is a desktop widget engine for macOS that renders JavaScript-based widgets as live content directly on the desktop background. Widgets are authored using JSX syntax with inline CSS styling, enabling a React-like component model and automatic code reload without manual refreshing. The engine provides built-in bridges for executing arbitrary shell commands asynchronously, accessing device geographic location with street-level detail, and routing outbound HTTP requests through a local proxy to bypass cross-origin restrictions when fetching external data. Distinctively, widgets can be a

AdvPhishing is a tool for social engineering simulations and credential harvesting testing. It generates deceptive web interfaces, including cloned service provider pages and pre-made layouts that mimic payment and social media platforms, to capture user login details. The tool manages the end-to-end deployment of phishing campaigns by routing captured credentials to a specified email address via an integrated SMTP mail delivery mechanism. It includes utilities for exposing a local development server to the public internet through secure tunneling and redirects users to legitimate third-party

This project is a cross-platform mapping SDK and hardware-accelerated rendering engine implemented in C++. It provides a shared geospatial core that allows for the embedding of interactive maps into Android, iOS, macOS, Node.js, and Qt applications. The system focuses on high-performance vector tile rendering using OpenGL and GPU primitives to display interactive 3D landscapes and complex geospatial datasets. It transforms compressed protocol buffers into customizable visuals through a style-driven layer pipeline. The capability surface extends to comprehensive location services, including g

react-fns is a suite of declarative components and utilities designed to wrap imperative browser APIs for use in React applications. It provides a set of components and higher-order components that integrate browser environment data, device sensors, network status, and native application launchers into a reactive user interface. The library enables declarative access to hardware sensors for tracking accelerometer, gyroscope, and orientation data in real time. It also includes native app launchers that trigger the default system mail and SMS applications using pre-filled links. Additional cap

DietPi is an ultra-lightweight Debian distribution and software platform purpose-built for single-board computers. It provides a minimal operating system that strips away unnecessary services to reduce CPU and RAM usage, and includes a curated software catalogue of pre-optimised applications that can be installed with a single command. The system reads a plain-text configuration file before first boot to perform unattended OS and software installation, and offers a web interface for remote system administration. What distinguishes DietPi is its comprehensive, integrated approach to turning a

BloodHound is an identity risk management platform and graph-based attack path analyzer used to map identity relationships and permissions in Active Directory. It functions as a security tool for auditing directory services, uncovering unintended privilege relationships, and visualizing sequences of permissions that can lead to domain compromise. The project differentiates itself as a comprehensive adversary emulation framework that coordinates remote agents and executes post-exploitation commands. It includes a reverse proxy for bypassing multi-factor authentication via real-time session hij

01 is a voice-to-code agent and language model voice interface framework that enables natural language control of computers and devices. It functions as a real-time audio streaming server and a cross-platform voice client, translating spoken instructions into executable code to automate software, manage files, and browse the web. The system supports both local and cloud-based language models, alongside local or hosted speech-to-text and text-to-speech engines. It is designed for custom hardware integration, providing the means to build embedded AI voice controllers using microcontrollers like

BrowserSync is a web development synchronization tool and live reload server. It functions as a local static web server, a reverse proxy server for existing sites, and a browser testing orchestrator that coordinates page state across different browsers and physical devices. The tool is distinguished by its ability to mirror user interactions, such as clicks, scrolls, and form inputs, in real time across all connected devices. It also provides a web-based device control interface and the capability to create public URL tunnels for remote testing of local sites. The system covers a broad range

Laragon is a portable web server suite and WAMP stack manager that provides a self-contained local development environment. It enables the bootstrapping of web applications through the orchestration of web servers, databases, and language runtimes on a single machine. The project is distinguished by its registry-free portable mode, allowing the entire development stack to be moved between drives or computers without re-installation. It features automated virtual host mapping and SSL certificate generation for local domains, as well as a local tunneling gateway to expose projects via public UR

InstaMaterial is a Material Design social media interface implementation for Android. It serves as a mobile application frontend and navigation framework featuring scrollable content feeds, user profiles, and interactive social engagement elements. The project is distinguished by its complex motion design, including circular reveal animations that transition between screens from specific touch coordinates and sequenced entry effects that coordinate translation, alpha, and scale transforms. It also implements a custom camera integration system that utilizes shaders for circular image cropping

This project is a comprehensive reference guide and directory of web browser capabilities. It serves as a technical map for accessing native operating system functions, hardware interfaces, and standard web APIs to bridge the gap between web applications and desktop or mobile environments. The resource provides detailed guidance on implementing Progressive Web App features, including offline caching, push notifications, and native installation prompts. It also catalogs methods for interacting with hardware peripherals via USB, Bluetooth, and NFC, as well as reading raw data from device sensor