Brosec – An interactive reference tool to help security professionals utilize useful payloads and commands.
Overview :
– Brosec is a RTFM-like utility to help Security Bros remember complex but useful payloads and commands
– Brosec utilizes saved variables (set by you) to create custom payloads on the fly. This config info is stored in a local db for your convenience
– Brosec outputs payloads and copies it to your clipboard in order to make your pentesting even more magical
– Your current config can be accessed by the config command at any time, or by entering the variable name
– Config values can be changed at any time by entering set <variable> <value>
– You can navigate to frequently used payloads by entering the menu sequence from the command line: bros <sequence>
Ex: bros 412 – This would automate entering 4 for the Web Menu, 1 for the XXE sub menu, and 3 for the XXE local file read payload

it work with :
– XXE Attacks
— Remote DTD File Parsing
— XXE (Local File Read)
— XXE (Local File Exfiltration using parameter entities)
– Linux Payload :

– Windows Common payload :

Payload Variables :
+ LHOST : Local IP or name
+ LPORT : Local IP or name
+ RHOST : Remote IP or name
+ RPORT : Remote IP or name
+ USER : Username (only used in a few payloads)
+ PROMPT : User Prompt (This isn’t a stored value. Instead, payloads with this variable will prompt for input.)

Usage :

Installation
– git clone https://github.com/gabemarshall/Brosec.git
– cd into the directory and run npm install
– Linux users will need to install xclip
– Mac users may need to install netcat (via homebrew) for some payloads

Download : Master.zip  | Clone Url
Source : https://github.com/gabemarshall