Learning

• https://github.com/awillard1/Web-Vuln-Learning

XSS

• https://github.com/awillard1/pentesting/tree/main/files/xss

XSS Real World Examples

• SharePoint JavaScript Payload Exploit

Command and Control

• PHP Hosted Files: https://github.com/awillard1/c2cmd-php-web-component
• C# Version: https://github.com/awillard1/c2cmd
• Java Version: https://github.com/awillard1/c2cmd-java

Password Cracking

• https://github.com/awillard1/jtr-helper
• https://github.com/awillard1/Pen-Test-Tools/wiki/Hashcat-Rule-Generator-from-a-word-or-words-in-a-file
• https://github.com/awillard1/Pen-Test-Tools/wiki/Password-Cracking
• https://github.com/awillard1/Pen-Test-Tools/wiki/Using-Rules-with-Hashcat

Java Web Shell (wsh.war)

• The file wsh.war is derived from https://github.com/awillard1/java-web-shell

Disclaimer

• All the information provided on this site is for educational purposes only.
• The site or the authors are not responsible for any misuse of the information.
• You shall not misuse the information to gain unauthorized access and/or write malicious programs.
• These information shall only be used to expand knowledge and not for causing malicious or damaging attacks.