From 18012172368e3c2b2175813796b2f459a2e760d5 Mon Sep 17 00:00:00 2001 From: strawp Date: Sat, 17 Jul 2021 16:22:50 +0100 Subject: [PATCH] Updated readme --- README.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/README.md b/README.md index d996b1b..ce1a190 100644 --- a/README.md +++ b/README.md @@ -20,6 +20,11 @@ Some of the files are plain JavaScript .js files, others are PHP scripts which s * If you're running these over HTTPS for actual exploitation rather than a PoC, you'll need a proper trusted TLS cert (Let's Encrypt CA, for example) otherwise victim's browsers won't fetch the files at all. If it's for a PoC you can just temporarily trust your self signed cert. * Hit F12 and view the debug console for any information about why a particular script might not work + +## Generator + +`generator.php` is a tool which can help to load one of the below payloads or to inject a custom payload using various injection, execution and encoding options. + ## Payloads ### apache_httponly_bypass.js