Pinned Loading

1. JS-Tap JS-Tap Public

   JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom Java…

   JavaScript 308 31

2. WP-XSS-Admin-Funcs WP-XSS-Admin-Funcs Public

   JavaScript functions intended to be used as an XSS payload against a WordPress admin account.

   JavaScript 51 9

3. Top-Port-Slicer Top-Port-Slicer Public

   Python script to give you subsets of the nmap "top-ports". For example, I want the 10th to 100th most common TCP ports. Spits out a comma separated list you can copy into -p arg for nmap or masscan

   Python 17 3

4. postBasedXSS postBasedXSS Public

   Demo of various ways to exploit post based reflected XSS

   Python 14 1

5. ENNEoS ENNEoS Public

   Evolutionary Neural Network Encoder of Shenanigans. Obfuscating shellcode with an encoder that uses genetic algorithms to evolve neural networks to contain and output the shellcode on demand.

   C++ 21 9

6. proxy-helper-the-sequel proxy-helper-the-sequel Public

   Port/rework of proxy-helper plugin for hak5 Pineapples

   TypeScript 6