Drew

JS-Tap. JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and maintain persistence. Browser extension, electron app, and node/bun app implants are included.

WP-XSS-Admin-Funcs. JavaScript functions intended to be used as an XSS payload against a WordPress admin account.

DragonHash. Demo code JavaScript POC that tricks user into sending Windows hash to responder

MCP-ASD. MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite

ENNEoS. Evolutionary Neural Network Encoder of Shenanigans. Obfuscating shellcode with an encoder that uses genetic algorithms to evolve neural networks to contain and output the shellcode on demand.

XSS-Data-Exfil. Sample code for exfiltrating data through an XSS vulnerability. XSS Payload retrieves sensitive data in victim's browser, then breaks it into chunks. Sends those chunks out as image requests (data in image filename). Example commands and python script to put the original data back together.

Top-Port-Slicer. Python script to give you subsets of the nmap "top-ports". For example, I want the 10th to 100th most common TCP ports. Spits out a comma separated list you can copy into -p arg for nmap or masscan

postBasedXSS. Demo of various ways to exploit post based reflected XSS

ColonelClustered. A Java Burp Plugin that performs text clustering on responses to identify outliers/groups based on the actual content of the server responses, say from an Intruder run.

endgame. An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

checkHostsInScope. Bash script to take a list of domains/subdomains (e.g. from amass) and check if they're in scope based on a file of inscope IP addresses

proxy-helper-the-sequel. Port/rework of proxy-helper plugin for hak5 Pineapples

shellcodeEncryptor. Python script to take any file and create a C header file with that binary data encoded as a char array. Optionally XOR encrypts the data. Helpful for creating custom loaders for shellcode.

NEAT_Thesis. An implementation in C++ of novelty search in competitive coevolution using NEAT (Neuroevolution of augmenting topologies)

dragInputClickjacking. Demo of using draggable elements in a clickjacking PoC to "type" user inputs.

sonicWallBruteForce. Script to brute force logins to SonicWall

rickRollAddressBarPayload. XSS/JavaScript payload that runs the rick roll lyrics through in the browser address bar.

WP-XSS-Challenge-Deploy. Python script to help automate deployment of my XSS challenge infrastructure

javascriptFileEncoder. Encodes a file into JavaScript friendly hex data, useful for adding file uploads to session riding XSS payloads

plistsubstractor3. Python3 version of plistsubstractor

javaScriptDeployer. Example bash script and JavaScript to copy a JavaScript payload into all .js files, but have only one copy run, regardless of how many .js files are included in the rendered page.

Normalized-Compression-Distance-NCD-Zlib. Simple C++ header file with a class that uses the Zlib compression algorithm to calculate Normalized Compression Distance (NCD) values

Web_Crypto_API_Demo. Demo server and client-side JavaScript code for how to use Web Crypto API to do application level encryption for your web traffic.