GithubHelp home page GithubHelp logo

ykankaya / awesome-social-engineering Goto Github PK

View Code? Open in Web Editor NEW

This project forked from giuliacassara/awesome-social-engineering

0.0 1.0 0.0 38 KB

A curated list of awesome social engineering resources.

awesome-social-engineering's Introduction

Awesome Social Engineering


A curated list of awesome social engineering resources, inspired by the awesome-* trend on GitHub.

Those resources and tools are intended only for cybersecurity professional, penetration testers and educational use in a controlled environment.

No humans were manipulated to make this list!

Table of Contents

  1. Online Courses
  2. Capture the Flag
  3. Psychology Resources
  4. Social Engineering Books
  5. OSINT
  6. Documentation
  7. Tools
  8. Miscellaneus
  9. Contribution
  10. License

Online Courses

Capture the Flag - The SECTF, DEFCON

Psychology Books

Most of these books covers the basics of psychology useful for a social engineer.

Social Engineering Books


OSINT Resources


  • XRay - XRay is a tool for recon, mapping and OSINT gathering from public networks.
  • Intel Techniques Online Tools - Use the links to the left to access all of the custom search tools.
  • Buscador - A Linux Virtual Machine that is pre-configured for online investigators
  • Maltego - Proprietary software for open source intelligence and forensics, from Paterva.
  • theHarvester - E-mail, subdomain and people names harvester
  • creepy - A geolocation OSINT tool
  • exiftool.rb - A ruby wrapper of the exiftool, a open-source tool used to extract metadata from files.
  • metagoofil - Metadata harvester
  • Google Hacking Database - a database of Google dorks; can be used for recon
  • Google-dorks - Common google dorks and others you prolly don't know
  • GooDork - Command line go0gle dorking tool
  • dork-cli - Command-line Google dork tool.
  • Shodan - Shodan is the world's first search engine for Internet-connected devices
  • recon-ng - A full-featured Web Reconnaissance framework written in Python
  • github-dorks - CLI tool to scan github repos/organizations for potential sensitive information leak
  • vcsmap - A plugin-based tool to scan public version control systems for sensitive information
  • Spiderfoot - multi-source OSINT automation tool with a Web UI and report visualizations
  • DataSploit - OSINT visualizer utilizing Shodan, Censys, Clearbit, EmailHunter, FullContact, and Zoomeye behind the scenes.
  • snitch - information gathering via dorks
  • Geotweet_GUI - Track geographical locations of tweets and then export to google maps.


Social Engineer resources

  • The Social-Engineer portal - Everything you need to know as a social engineer is in this site. You will find podcasts, resources, framework, informations about next events, blog ecc...


Useful tools

  • Tor - The free software for enabling onion routing online anonymity
  • SET - The Social-Engineer Toolkit from TrustedSec

Phishing tools

  • Gophish - Open-Source Phishing Framework
  • King Phisher - Phishing campaign toolkit used for creating and managing multiple simultaneous phishing attacks with custom email and server content.
  • wifiphisher - Automated phishing attacks against Wi-Fi networks
  • PhishingFrenzy - Phishing Frenzy is an Open Source Ruby on Rails application that is leveraged by penetration testers to manage email phishing campaigns.
  • Evilginx - MITM attack framework used for phishing credentials and session cookies from any Web service
  • Lucy Phishing Server - (commercial) tool to perform security awareness trainings for employees including custom phishing campaigns, malware attacks etc. Includes many useful attack templates as well as training materials to raise security awareness.







Your contributions and suggestions are heartily♥ welcome. (✿◕‿◕). Please check the Contributing Guidelines for more details.



Creative Commons License

This work is licensed under a Creative Commons Attribution 4.0 International License

awesome-social-engineering's People


cschwartz avatar hepisec avatar hslatman avatar v2-dev avatar



Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.