Discover @dxa4481 Open Source projects

Dylan Ayrey (@dxa4481)

dxa4481

Stars
3,693
Global Rank 7,736 (Top 0.3 %)
Followers 920
Following 4
Registered almost 12 years ago
Most used languages

HTML
35.6 %

Python
31.1 %

JavaScript
20.0 %

Eagle 6.7 %

VHDL 2.2 %

Go
2.2 %

CSS
2.2 %
Location 🇺🇸 United States
Country Total Rank 2,814
Country Ranking

Eagle 38

HTML
130

VHDL 163

Python
1,187

CSS
1,391

JavaScript
7,182

Pastejacking

A demo of overriding what's in a person's clipboard

WPA2-HalfHandshake-Crack

This is a POC to show it is possible to capture enough of a handshake with a user from a fake AP to crack a WPA2 network without knowing the passphrase of the actual AP.

cssInjection

Stealing CSRF tokens with CSS injection (without iFrames)

Snapper

A security tool for grabbing screenshots of many web hosts

truffleHogRegexes

These are the regexes that power truffleHog

gcploit

These are tools we released with our 2020 defcon/blackhat talk https://www.youtube.com/watch?v=Ml09R38jpok

XSSJacking

Abusing Self-XSS and Clickjacking to trigger XSS

windowHijacking

A demo of altering an opened tab after a timer

AttackingAndDefendingTheGCPMetadataAPI

This repo gives an overview of some GCP metadata API attack and defend patterns

Damn-Vulnerable-Redis-Container

An example of obtaining RCE via Redis and CSRF

XSSOauthPersistence

Maintaining account persistence via XSS and Oauth

whatsinmyredis

A CSRF demonstration of stealing local Redis data, and encrypting all Redis instances on a local network

inputProtectionShield

CORS

JSON API's Are Automatically Protected Against CSRF, And Google Almost Took It Away.

CSRF-PoC-Genorator

This is a simple CSRF Proof of Concept generator that supports multiple form encodings and methods

mimikittenz4Linux

Steals cleartext passwords from webservices, by reading the memory of browsers

santaHog

Scans packages in npm and pypi for secrets

clientHashing

A demonstration of secure hashing done client side

bygonessl

A tool to discover bygonessl vulnerabilities using the facebook API

logger

Simple javascript logging of fingerprint, IP address and user agent

SmartHealthCardViewer

Smart Health Card Viewer, view your California Smart Health Card Vaccination record

BitRush

An open source project for bitcoin mining on an FPGA

domainAbandonedDetector

Detects abandoned domains referenced in HTML

dxa4481.github.io

This is my resume, in HTML/CSS

JayPi

Translating JTAGENUM to Python for the Raspberry Pi

redirect_demo

gpsIoTTracker

This simple python module takes GPS locations of a moving object, and measured signal strengths of an IoT object and uses trilateration and the method of least squares to solve for the location of the object

Veyebrations

We are creating a system that translates measured distances of physical objects into vibrations to assist the blind

JohnWilliams

coolSVGXSS

simple demo of XSS in an SVG

security_reports

A simple template that can be used to deliver security reports either for bug bounties, internal reports, or consultancy work

penguin

A restful single page app tool sharing application

VibrationAPI

An example of the HTML5 vibration API

Tutorials

Learning new things

dotGitFinder

HIVStats

This application makes HIV statistics very accessible

log_handler

The backend log handler for logger.io

SocialEngineeringPresentation

A simple presentation on social engineering

SoundMaker

This uses the open hardware provided by arduino to modify an arduino PCB into making a sound board

fingerprint-page-count

Counts how many times a user has viewed a page based on his browser's fingerprint

blog

SeriousApiarist

Controlled builds, tests, static analysis, releases, and deploys with validation and 2FA and live streaming to your CI

serviceworkerCSRFLogout

insecureLamp

a very simple insecure web application designed to turn a lamp on and off

serverConfigs

The server configuration files for security.love and e-q.pw

FingerprintPressure

This simple demo shows given an image of a fingerprint, you can determine how hard the person was pushing down

AccelerometerAPI

A brief demonstration showing browsers can access a device's accelerator data without promoting a user. This app shows the total acceleration vector magnitude

CORS-pdf

This is a simple demo that shows you can host a PDF cross origin in chrome, and track a user's interaction with the PDF with the default chrome PDF viewer.