Demo code JavaScript POC that tricks user into sending Windows hash to responder

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom Java…

Demo server and client-side JavaScript code for how to use Web Crypto API to do application level encryption for your web traffic.

Python script to leverage a YouTube search API to create CSV files of searches. Links to videos, titles, description, unique IDs and more are put into the CSV file to import into Excel.

Port/rework of proxy-helper plugin for hak5 Pineapples

Demo of using draggable elements in a clickjacking PoC to "type" user inputs.

XSS/JavaScript payload that runs the rick roll lyrics through in the browser address bar.

Script to extract base64 encoded Binary PLISTs from XML/PLIST files

Demo of various ways to exploit post based reflected XSS

Python3 version of plistsubstractor

Example bash script and JavaScript to copy a JavaScript payload into all .js files, but have only one copy run, regardless of how many .js files are included in the rendered page.

Bash script to take a list of domains/subdomains (e.g. from amass) and check if they're in scope based on a file of inscope IP addresses

Sample code for exfiltrating data through an XSS vulnerability. XSS Payload retrieves sensitive data in victim's browser, then breaks it into chunks. Sends those chunks out as image requests (data …

Script to brute force logins to SonicWall

JavaScript functions intended to be used as an XSS payload against a WordPress admin account.

Script to copy chunks of code to the clipboard in the background based on how far along you are in your demo

Python script to help automate deployment of my XSS challenge infrastructure

Encodes a file into JavaScript friendly hex data, useful for adding file uploads to session riding XSS payloads

Python script to take any file and create a C header file with that binary data encoded as a char array. Optionally XOR encrypts the data. Helpful for creating custom loaders for shellcode.

Python script to give you subsets of the nmap "top-ports". For example, I want the 10th to 100th most common TCP ports. Spits out a comma separated list you can copy into -p arg for nmap or masscan

Evolutionary Neural Network Encoder of Shenanigans. Obfuscating shellcode with an encoder that uses genetic algorithms to evolve neural networks to contain and output the shellcode on demand.

Simple C++ header file with a class that uses the Zlib compression algorithm to calculate Normalized Compression Distance (NCD) values

Header files with useful C++ classes for 3-D math, compression, timing, etc. Great for vector math.