v2-dev/awesome-social-engineering
Awesome Social Engineering
Dieses Projekt ist eine kuratierte Sammlung von Frameworks, Bibliotheken und Toolsets, die für Social Engineering und öffentliche Datensammlung entwickelt wurden. Es aggregiert spezialisierte Software und Bildungsmaterialien, die zur Durchführung menschzentrierter Angriffe während professioneller Sicherheitsüberprüfungen verwendet werden.
Das Verzeichnis bietet Ressourcen zum Sammeln und Visualisieren von Open-Source-Intelligence, um sensible Informationslecks zu identifizieren. Es enthält zudem eine Sammlung von Methoden und Software zur Durchführung von Phishing-Kampagnen, um Zugangsdaten und Session-Cookies zu ernten.
Das Repository deckt zudem Bildungsmaterialien ab, die sich auf Verhaltenspsychologie, Überzeugungstechniken und das Studium des Human-Hacking konzentrieren. Diese Ressourcen sind in kategorisierten Listen für die Entdeckung psychologischer und technischer Materialien organisiert.
Features
- Offensive Security Tools - Curates frameworks and utilities for reconnaissance and human-centric attacks used in professional security engagements.
- Awesome List - A community-curated directory that catalogs and links out to other open-source projects, rather than a standalone tool you run yourself.
- Open Source Intelligence - Provides tools and services for gathering and analyzing information from public sources to find leaks.
- Social Engineering Tools - Aggregates specialized tools and educational materials used to execute human-centric cybersecurity attacks.
- OSINT and Information Gathering - Facilitates the gathering and analysis of public data from social media and search engines.
- Social Engineering - Aggregates frameworks and tools for simulating social engineering attacks and studying human hacking.
- Phishing Campaign Orchestrators - Offers workflows for coordinating email distribution and tracking user interactions in simulated phishing campaigns.
- OSINT Frameworks - Provides a directory of frameworks for gathering intelligence and mapping targets using public data.
- Phishing Attack Tools - Provides tools to simulate and execute phishing campaigns to capture credentials and session cookies.
- Target Identification Extractions - Ships capabilities to parse files and public web pages to isolate identifying information about targets.
- Cybersecurity Training Materials - Curates open-source educational content and research resources focused on psychological manipulation.
- Persuasion and Influence Studies - Offers curated reading lists on persuasion and behavioral patterns to help influence targets.
- Man-in-the-Middle Frameworks - Includes tools for intercepting and proxying network traffic to capture session cookies and credentials.
- Intelligence Visualizations - Transforms raw public data and metadata into visual maps or graphs to identify sensitive leaks.
- Phishing Templates - Provides predefined content structures and designs to create custom deceptive emails for credential harvesting.
- Related Awesome Lists - Resources for understanding and defending against social engineering attacks.
- Penetration Testing Toolkits - Resources for social engineering research.
