Dylan Ayrey

Steals cleartext passwords from webservices, by reading the memory of browsers

dxa4481

A demo of overriding what's in a person's clipboard

dxa4481

Scans packages in npm and pypi for secrets

dxa4481

A security tool for grabbing screenshots of many web hosts

dxa4481

These are the regexes that power truffleHog

dxa4481

A CSRF demonstration of stealing local Redis data, and encrypting all Redis instances on a local network

dxa4481

A demo of altering an opened tab after a timer

dxa4481

This is a POC to show it is possible to capture enough of a handshake with a user from a fake AP to crack a WPA2 network without knowing the passphrase of the actual AP.

dxa4481

Abusing Self-XSS and Clickjacking to trigger XSS

dxa4481

Maintaining account persistence via XSS and Oauth

dxa4481