v2-dev/awesome-social-engineering
Awesome Social Engineering
Este proyecto es una colección curada de frameworks, bibliotecas y conjuntos de herramientas diseñados para la ingeniería social y la recopilación de datos públicos. Agrega software especializado y materiales educativos utilizados para realizar ataques centrados en humanos durante compromisos de seguridad profesionales.
El directorio proporciona recursos para recopilar y visualizar inteligencia de fuentes abiertas (OSINT) para identificar fugas de información sensible. También incluye una colección de métodos y software para ejecutar campañas de phishing para recolectar credenciales y cookies de sesión.
El repositorio cubre además materiales educativos centrados en psicología conductual, técnicas de persuasión y el estudio del hacking humano. Estos recursos están organizados en listas categorizadas para el descubrimiento de materiales psicológicos y técnicos.
Features
- Offensive Security Tools - Curates frameworks and utilities for reconnaissance and human-centric attacks used in professional security engagements.
- Awesome List - A community-curated directory that catalogs and links out to other open-source projects, rather than a standalone tool you run yourself.
- Open Source Intelligence - Provides tools and services for gathering and analyzing information from public sources to find leaks.
- Social Engineering Tools - Aggregates specialized tools and educational materials used to execute human-centric cybersecurity attacks.
- OSINT and Information Gathering - Facilitates the gathering and analysis of public data from social media and search engines.
- Social Engineering - Aggregates frameworks and tools for simulating social engineering attacks and studying human hacking.
- Phishing Campaign Orchestrators - Offers workflows for coordinating email distribution and tracking user interactions in simulated phishing campaigns.
- OSINT Frameworks - Provides a directory of frameworks for gathering intelligence and mapping targets using public data.
- Phishing Attack Tools - Provides tools to simulate and execute phishing campaigns to capture credentials and session cookies.
- Target Identification Extractions - Ships capabilities to parse files and public web pages to isolate identifying information about targets.
- Cybersecurity Training Materials - Curates open-source educational content and research resources focused on psychological manipulation.
- Persuasion and Influence Studies - Offers curated reading lists on persuasion and behavioral patterns to help influence targets.
- Man-in-the-Middle Frameworks - Includes tools for intercepting and proxying network traffic to capture session cookies and credentials.
- Intelligence Visualizations - Transforms raw public data and metadata into visual maps or graphs to identify sensitive leaks.
- Phishing Templates - Provides predefined content structures and designs to create custom deceptive emails for credential harvesting.
- Related Awesome Lists - Resources for understanding and defending against social engineering attacks.
- Penetration Testing Toolkits - Resources for social engineering research.
