Modularize the attack vectors

[aparsons]

Currently, the attacks (x.js, y.js) are placed in the root directory. It would be neat if there was a plugin model so when an attack was placed into a plugins folder CookieCatcher would automatically register it and make it available.