Dylan Ayrey

This repo gives an overview of some GCP metadata API attack and defend patterns

dxa4481

A demonstration of secure hashing done client side

dxa4481

JSON API's Are Automatically Protected Against CSRF, And Google Almost Took It Away.

dxa4481

This is a simple CSRF Proof of Concept generator that supports multiple form encodings and methods

dxa4481

Stealing CSRF tokens with CSS injection (without iFrames)

dxa4481

An example of obtaining RCE via Redis and CSRF

dxa4481

These are tools we released with our 2020 defcon/blackhat talk https://www.youtube.com/watch?v=Ml09R38jpok

dxa4481

A tool to discover bygonessl vulnerabilities using the facebook API

dxa4481

dxa4481

Simple javascript logging of fingerprint, IP address and user agent

dxa4481