Swordphish is a platform allowing to create and manage fake phishing campaigns. Identifying security contacts may be hard in a big structure, that's why we developed Swordphish and a button embedded in the mail client to help our users to report suspicious mail to security teams just with a simple click. This choice seriously improved our visibility on what our users are receiving, and we decided to release it to the community! Swordphish can be used to train people identifying suspicious mails, and it can help checking that people report correctly the mails to security teams. Installation Detailed installation instructions can be found in the documentation. Docker images Swordphish has a docker-compose script to get up and running quickly.
FEATURES
ALTERNATIVES
King Phisher is a phishing campaign toolkit for testing and promoting user awareness through simulated attacks.
A platform that provides visibility and security monitoring of hardware, firmware, and software components in IT infrastructure to identify supply chain risks and vulnerabilities.
A tool for analyzing Android applications in local storage with various functionalities.
A set of tools for securing JavaScript projects against software supply chain attacks.
StringSifter is a machine learning tool for automatically ranking strings for malware analysis.
Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor.
Android application for learning about vulnerabilities in modern Android apps and testing pentesting skills.
Web-based tool for browsing mobile applications sandbox and previewing SQLite databases.
PINNED

InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.

Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.

Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.

System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.

Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.

Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.

Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.

Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.