cookiecutter-poc

Contents:

  • Installation
    • Prerequisites
    • Quick Install
    • From Local Template
    • Template Prompts
    • Generated Project Structure
    • Run Your Project
    • Next Steps
  • Quick Start
    • Prerequisites
    • Create a New POC Project
    • Run Your First Command
    • Your First Exploit
    • Run Your Exploit
    • Common Patterns
    • Next Steps
  • HTTP Server & Callbacks
    • Quick Start
    • How It Works
    • Sending Data
      • Cookie Exfiltration
      • Data Exfiltration
    • Retrieving Data
      • Get Cookie
      • Get Exfil Data
      • Queue Management
    • Payload Directory
      • Generating Payloads
      • Example: XSS Cookie Theft
    • Server Logs
    • Event Schema
    • Tips
  • Payloads
    • Directory Structure
    • Access via HTTP Server
      • Examples
    • Included Payloads
      • XSS Payloads
      • Webshells
    • Common Use Cases
      • Serving Exploit Binaries
      • Hosting Reverse Shell Scripts
      • XSS Data Exfiltration
      • File Upload Payloads
  • Examples
    • Colored Output
    • Cookie Handling
    • XSS Payloads
    • XXE Exploitation
    • Reverse Shells
    • Shell Catcher
    • File Upload
    • Batch Requests
    • Apache Hooks
    • Network Utilities
    • Encoding Utilities
    • HTML Parsing
    • Timing Attacks
    • Zip Utilities
  • Workflows
    • XSS Cookie Stealer
    • RCE to Interactive Shell
    • File Upload to RCE
    • XXE Data Exfiltration
    • Blind SQL Injection
    • SSRF to Internal Access
    • Credential Stuffing
    • Complete Exploitation Workflow
  • API Reference
    • Utilities
      • Reverse Shells
        • bash_encoded_shell()
        • bash_shell()
        • nc_mkfifo_shell()
        • nc_shell()
        • php_shell()
        • powershell_oneliner()
        • powershell_shell()
        • python_oneliner()
        • python_shell()
      • Shell Catcher
        • ShellCatcher
        • auto_shell()
        • quick_catch()
      • HTML Parser
        • HTMLParser
        • parse_file()
        • parse_response()
        • quick_parse()
      • Encoding
        • base64_decode()
        • base64_encode()
        • char_codes()
        • crc32()
        • double_url_encode()
        • hash_file()
        • hex_decode()
        • hex_encode()
        • hmac_sha256()
        • html_decode()
        • html_encode()
        • json_decode()
        • json_encode()
        • md5()
        • ntlm()
        • sha1()
        • sha256()
        • sha512()
        • unicode_encode()
        • url_decode()
        • url_encode()
      • Output
        • Output
      • Cookie Handling
        • cookie_string_to_header()
        • parse_cookie_string()
      • Server Hooks
        • drain_queue()
        • get_cookie()
        • get_event()
        • get_exfil()
        • wait_for_callback()
      • XSS Payloads
      • XXE Payloads
        • basic_file_read()
        • blind_oob()
        • docx_xxe()
        • expect_wrapper()
        • generate_oob_files()
        • jar_protocol()
        • oob_dtd()
        • parameter_entity()
        • php_filter_b64()
        • quick_test()
        • soap_xxe()
        • svg_xxe()
        • utf7_bypass()
        • write_payload()
        • xlsx_xxe()
      • Timing
        • date_to_timestamp()
        • epoch_ms_now()
        • epoch_now()
        • epoch_range()
        • epoch_range_ms()
        • http_date_to_epoch_ms()
        • identify_timestamp()
        • measure_time()
        • sleep_ms()
        • time_based_check()
        • time_ms()
        • time_ns()
        • time_us()
        • timestamp_to_date()
      • File Upload
        • FileUploader
        • quick_upload()
      • Batch Requests
        • BatchResult
        • batch_request()
        • batch_request_sync()
        • generate_cookie_payloads()
        • generate_data_payloads()
        • generate_header_payloads()
        • generate_json_payloads()
        • generate_method_payloads()
        • generate_multi_payloads()
        • generate_param_payloads()
        • generate_path_payloads()
      • Apache Hooks
        • find_param_in_logs()
        • get_cookie()
        • get_exfil()
        • get_param()
        • parse_apache_line()
        • tail_log()
        • watch_log()
      • Network
        • get_callback_host()
        • get_interfaces()
        • get_local_ip()
      • Paths
        • ensure_dirs_exist()
        • get_log_file()
        • get_logs_dir()
        • get_payloads_dir()
        • get_project_root()
        • get_servers_dir()
      • Process
        • run()
      • Zip Utilities
        • extract_zip()
        • quick_zip()
        • zip_file()
        • zip_folder()
        • zip_multiple()
    • Servers
      • POC HTTP Server
        • POCHTTPHandler
        • main_with_args()
        • Usage
        • Examples
    • Overview
cookiecutter-poc
  • Search

© Copyright 2025, Kyle Keefer.

Built with Sphinx using a theme provided by Read the Docs.