Lauritz

domscan. Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.

dead-domain-discovery. This Chromium extension scans the page for external iFrames, Scripts, and Styles, logs them to the console, and checks if their domains are resolvable.

auth-request-analyser. This Chromium extensions aims at supporting the analysis of single sign-on implementations, by offering semi-automated analysis and attack capabilities for OAuth 2.0 and OpenID Connect 1.0 Authorization/Authentication Requests.

blind-xss-payloads.

dead-domain-discovery-dns. A lightweight UDP DNS forwarder that highlights potentially expired or unregistered domains by watching for unanswered lookups.

oidc-custom-idp. Custom and flexible OpenID Connect IdP for research and PoC purposes

oidc-custom-sp. Custom and flexible OpenID Connect SP for research and PoC purposes

xss-challenges. PHP

md-report-generator. Python-based report generation toolchain based on Markdown input files. To start a fresh report, clone this repo and you are ready to go! 🚄

Tracking-PoC. Short Implementation of tracking examples based on cached redirects (browser behaviour)

PoC-Using_ImageMagick_in_vulnerable_WebApps. JavaScript

remote-js-debugger. HTML