Pretexta is a social engineering simulation lab designed to help security professionals, educators, and organizations understand why social engineering attacks succeed.

Professional email templates and landing pages for employee security awareness phishing simulations using GoPhish. Ready-to-deploy campaigns with realistic scenarios, educational content, and customizable branding for enterprise security training programs.

This GitHub project provides a close real-life phishing attack simulation solution. It uses Gophish for campaign orchestration and Poste.io to send emails to disposable targets, safely assessing susceptibility and strengthening human defenses.

AI-powered phishing simulation and cybersecurity awareness platform built with React, Express, MongoDB, and Gemini API integration.

Security awareness tooling demonstrating VSCode extension abuse, reverse shell delivery, and Firefox session cookie theft — for authorised penetration testing and internal security awareness demonstrations only.

🦊 Plateforme française open source de cybersensibilisation pour PME. AGPLv3 · souverain FR · phishing simulé · vishing IA · NIS2 · RGPD · self-host gratuit ou cloud à partir de 0 €.

Official API and MCP server documentation for HailBytes ASM (Attack Surface Management) and HailBytes SAT (Security Awareness Training). OpenAPI 3.1 specs, integration guides, and SDK examples.

Open-source dashboards and scripts for measuring phishing simulation program effectiveness.

This training module is designed to help CTOs to implement a cybersecurity employee training & testing program

Phalanx Check: A security awareness training tool developed to simulate internal phishing campaigns safely. Features dry-run modes, rate-limiting, and strict target validation.

Official Terraform modules for deploying HailBytes ASM and SAT on AWS and Azure. Single VM, HA hot-hot, and auto-scaling tiers. Requires active HailBytes Marketplace subscription.

Lints GoPhish-format email templates for deliverability, tracking, merge tags, and spam triggers. Companion to HailBytes SAT and gophish-training-templates.

VAXINX Password Analyzer — A cybersecurity-focused tool that evaluates password strength, simulates attack vectors, and provides defensive recommendations using real-time analysis.

A secure and ethical phishing simulation training platform designed for authorized security awareness training and education. Includes consent-based simulations, logging, analytics, and strong security safeguards. Unauthorized or malicious use is strictly prohibited.

Information Security and AI Governance resources covering ISO 27001, ISO 42001, NIST CSF, SOC 2, gap assessments, control mapping, and AI risk classification.

Security-focused MCP server for Claude Desktop - Read-only access to KnowBe4 GraphQL API with 92+ optimized queries, PII filtering, and audit logging

AI-powered phishing detection and awareness tool for users, students, and cybersecurity analysts.

Served as an analyst on Mastercard’s Security Awareness Team to identify and report security threats