So, you think you have MFA? AAD/ROPC/MFA bypass testing tool

A tool to extract and abuse access tokens from AzureCLI for bypassing 2FA/MFA.

How to "bypass" annoying Duo 2FA

A professional AiTM Phishing Research Platform simulating legacy vs. modern authentication defenses (FIDO2/WebAuthn). Fully containerized & production-ready.

{{OFFODE}} {This is POC of how an attacker automate user's responce and bypass outlook}

Content supporting the DSAG workshop "SAP hacker in a day" 3rd December 2024

ArchPhish is an advanced, Go-based penetration testing framework that bypasses two-factor authentication (2FA) using transparent reverse‑proxy techniques. It enables authorised red teams to assess an organisation's resilience against sophisticated phishing attacks by capturing credentials and session tokens in real time, even from MFA‑protected

Spinex is a high-performance adversary simulation framework designed to demonstrate the lifecycle of a modern phishing attack.

Automate OpenVPN TOTP authentication!

AiTM phishing case study — MFA bypass demonstration (academic red team exercise, ESME Sudria 2025–2026)

An MFA brute forcer to use against inadequately secured MFA solutions.

Defender-focused analysis of a Microsoft 365 device-code phishing campaign (OAuth device-authorization abuse, MFA-bypassing) - defanged IOCs, Entra hunting, no live samples.

Hijack user account through phishing web site with use of helium browser