Authorized phishing and SE frameworks
SET
Social-Engineer Toolkit — phishing, credential harvesting, and payload delivery (lab use).
Gophish
Open-source phishing framework for authorized awareness campaigns.