v2-dev/awesome-social-engineering
Awesome Social Engineering
This project is a curated collection of frameworks, libraries, and toolsets designed for social engineering and public data gathering. It aggregates specialized software and educational materials used to perform human-centric attacks during professional security engagements.
The directory provides resources for gathering and visualizing open source intelligence to identify sensitive information leaks. It also includes a collection of methods and software for executing phishing campaigns to harvest credentials and session cookies.
The repository further covers educational materials focused on behavioral psychology, persuasion techniques, and the study of human hacking. These resources are organized into categorized lists for the discovery of psychological and technical materials.
Features
- Offensive Security Tools - Curates frameworks and utilities for reconnaissance and human-centric attacks used in professional security engagements.
- Awesome List - A community-curated directory that catalogs and links out to other open-source projects, rather than a standalone tool you run yourself.
- Open Source Intelligence - Provides tools and services for gathering and analyzing information from public sources to find leaks.
- Social Engineering Tools - Aggregates specialized tools and educational materials used to execute human-centric cybersecurity attacks.
- OSINT and Information Gathering - Facilitates the gathering and analysis of public data from social media and search engines.
- Social Engineering - Aggregates frameworks and tools for simulating social engineering attacks and studying human hacking.
- Phishing Campaign Orchestrators - Offers workflows for coordinating email distribution and tracking user interactions in simulated phishing campaigns.
- OSINT Frameworks - Provides a directory of frameworks for gathering intelligence and mapping targets using public data.
- Phishing Attack Tools - Provides tools to simulate and execute phishing campaigns to capture credentials and session cookies.
- Target Identification Extractions - Ships capabilities to parse files and public web pages to isolate identifying information about targets.
- Cybersecurity Training Materials - Curates open-source educational content and research resources focused on psychological manipulation.
- Persuasion and Influence Studies - Offers curated reading lists on persuasion and behavioral patterns to help influence targets.
- Man-in-the-Middle Frameworks - Includes tools for intercepting and proxying network traffic to capture session cookies and credentials.
- Intelligence Visualizations - Transforms raw public data and metadata into visual maps or graphs to identify sensitive leaks.
- Phishing Templates - Provides predefined content structures and designs to create custom deceptive emails for credential harvesting.
- Related Awesome Lists - Resources for understanding and defending against social engineering attacks.
- Penetration Testing Toolkits - Resources for social engineering research.
