https://github.com/arkadiyt/bounty-targets-data
http://www.asnlookup.com/
Diaa Hassan Diaa-Hassan
🧙
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| usage() { | |
| echo -e " | |
| #Options: | |
| -f, --file\t the domains list file | |
| -t, --thread\t the threads number | |
| -w, --wordlist\t the wordlist | |
| -o, --output\t the output directory |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Technology | |
| Subdomain Enumeration: | |
| # Basic usage | |
| subfinder -d example.com > example.com.subs | |
| # Recursive | |
| subfinder -d example.com -recursive -silent -t 200 -v -o example.com.subs |
cmd@fb:/tmp|❯ wc -l 33m-subdomain-wordlist.txt
33927885 33m-subdomain-wordlist.txt
Anon-Exploiter
/ automateSubdEnum.sh
Last active
July 8, 2022 13:05
For enumeration of subdomains from different scripts -- this will be getting used in a docker image soon
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| mainPATH=$(pwd)/ | |
| bar="---------------------------------------" | |
| echo -e "\n$bar\n\tSubdomains Enumerator\n$bar\n" | |
| read -p "Please enter target (i.e. site.com): " domain | |
| HOST=$domain |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| OUT="~/nuclei-results/$1" | |
| TPL="~/nuclei-templates" | |
| mkdir -p ${OUT} | |
| SUB=$(subfinder -d $1 -silent | httprobe | tee ${OUT}/$1.txt) | |
| cd ${TPL}; git pull origin master && cd - | |
| for tpl in $(find $TPL -name "*.yaml"); do $GOPATH/bin/nuclei -l ${OUT}/$1.txt -t $tpl -o "${OUT}/$(basename "$tpl" .yaml).txt"; done | |
| find ${OUT} -name "*.txt" -size 0 -delete |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ### | |
| # ▶ go get -u github.com/lc/gau | |
| # ▶ go get -u github.com/tomnomnom/qsreplace | |
| # ▶ go get -u github.com/tomnomnom/hacks/kxss | |
| # ▶ go get -u github.com/hahwul/dalfox | |
| # ▶ git clone https://github.com/dwisiswant0/DSSS | |
| ### | |
| gauq() { |
gh0sh
/ gf-and-gau-automate.sh
Last active
November 30, 2022 10:02
Simple script to look for juicy endpoints with gf and gau
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env bash | |
| # | |
| # Requirements | |
| # - Golang (for complete bug bounty tools, clone this https://github.com/x1mdev/ReconPi) | |
| # - gau (go get -u github.com/lc/gau) | |
| # - gf (go get -u github.com/tomnomnom/gf) | |
| # - Gf-Patterns (https://github.com/1ndianl33t/Gf-Patterns) - Read the README.md for how to copy json file to ~/.gf/ | |
| cd ~/.gf | |
| ls *.json > ~/patterns |
pikpikcu
/ github-recon
Created
June 20, 2020 10:24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| “Hackme.tld” API_key | |
| “Hackme.tld” secret_key | |
| “Hackme.tld” aws_key | |
| “Hackme.tld” Password | |
| “Hackme.tld” FTP | |
| “Hackme.tld” login | |
| “Hackme.tld” github_token | |
| “Hackme.tld” http:// & https:// | |
| “Hackme.tld” amazonaws | |
| “Hackme.tld” digitaloceanspaces |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| if [ "$1" == "-h" ] || [ "$1" == "--help" ] || [[ $# -eq 0 ]] | |
| then | |
| me=`basename "$0"` | |
| echo "Find subdomains in PTR-archive http://ptrarchive.com/tools/search.htm?date=ALL&label=example.com" | |
| echo -e "Usage:\n\t./${me} [domain]" | |
| echo -e "Example:\n\t./${me} example.com" | |
| echo -e "\t./${me} -v example.com # Verbose output, includes IPs." | |
| exit 1 |