PNG-IDAT-chunks ~ payload generator.

PNG-IDAT-chunks ~ payload generator.

Simple tool to generate malicious PNG images containing JavaScript code in IDAT chunks. Currently are supported only 3 characters domains.
Description function:
+ Revisiting XSS payloads in PNG IDAT chunks
https://www.adamlogue.com/revisiting-xss-payloads-in-png-idat-chunks/
+ An XSS on Facebook via PNGs & Wonky Content Types
https://whitton.io/articles/xss-on-facebook-via-png-content-types/
+ Encoding Web Shells in PNG IDAT chunks
https://www.idontplaydarts.com/2012/06/encoding-web-shells-in-png-idat-chunks/
+ Bug-hunter’s Sorrow
http://www.slideshare.net/masatokinugawa/avtokyo-bug-hunters-sorrow-enpng-idat

Requirement:
+ GD Graphics Library
+ perl

Usage

Source: https://github.com/vavkamil