Skip to content

Instantly share code, notes, and snippets.

View Diaa-Hassan's full-sized avatar
🧙

Diaa Hassan Diaa-Hassan

🧙
View GitHub Profile
@subfission
subfission / README.txt
Last active July 8, 2022 13:03
hack back guide
_ _ _ ____ _ _
| | | | __ _ ___| | __ | __ ) __ _ ___| | _| |
| |_| |/ _` |/ __| |/ / | _ \ / _` |/ __| |/ / |
| _ | (_| | (__| < | |_) | (_| | (__| <|_|
|_| |_|\__,_|\___|_|\_\ |____/ \__,_|\___|_|\_(_)
A DIY Guide
# Basic Usage
ffuf -w wordlist.txt -u http://127.0.0.1:8000/api/FUZZ/6 -o output.txt -replay-proxy http://127.0.0.1:8080
# Basic Usage With a Cookie
ffuf -w wordlist.txt -u http://127.0.0.1:8000/api/FUZZ/6 -o output.txt -replay-proxy http://127.0.0.1:8080 -b "laravel_session=eyJpdiI6Ii8wQU11dTVlUkg2alRHUXBIVzlGSnc9PSIsInZhbHVlIjoiOWs3YllJWTdqNC9xa1pMeFRvMFh0OE1vRFpaWm9GSzFkRktVZS9yUHBDM0lIazZ4K0NsbndxWVIxQ05VZWhqZUZaR0RGQWlFdmdDc24yWllYRklGSXI5STd2b05Pam4yRXIwV1BUWkZhUnFLNUFzOWsycmRHcnlxS0FqRWNsSnEiLCJtYWMiOiI3ZTliMmM2YzIxOTExNDE0NmVjYTYyMGI4Nzg4YzJiYjNmNjVkNDI1YzEyODYwMzY5YzczNzY3NTUwZDk0OGYzIn0%3D;"
# Adding a delay
ffuf -w wordlist.txt -u http://127.0.0.1:8000/api/FUZZ/6 -o output.txt -replay-proxy http://127.0.0.1:8080 –p 1 –t 3
# Adding a delay (new method)
#!/bin/bash
echo "you should die now :3 it'll be take some time"
#@Tomnomnom
go get -u -v github.com/tomnomnom/anew
go get -u -v github.com/tomnomnom/httprobe
go get -u -v github.com/tomnomnom/assetfinder
go get -u -v github.com/tomnomnom/waybackurls
go get -u -v github.com/tomnomnom/fff
go get -u -v github.com/tomnomnom/qsreplace
scan target for pentest
nmap -PN -n -A -sS -p- -oN output.nmap <IP>
-Pn : no ping check (host is up),
-n no dns resolution
-A : detect systeme info
-sT : tcp connect [laisse des traces dans les logs serveurs] (moins impactant que -sS Syn, ne laisse pas de trace dans les logs par defaut)
-p- : port de 0-65535
-oN output.nmap : write utput to file
ajouter un scan udp en parallèle -sU (dns, ipsec ...)
{
"targets": [],
"libraries": [
{
"folders": [
{
"id": "c43bd29e-8ebb-4a72-8cd4-be26d4b96087",
"title": "Reconnaissance",
"checklist": [
{
This file has been truncated, but you can view the full file.
!CREDITS.TXT
!INSTALL.TXT
!LICENSE.TXT
!ReadMe.txt
# directory-list-1.0.txt
# directory-list-2.3-big.txt
# directory-list-2.3-medium.txt
# directory-list-2.3-small.txt
# directory-list-lowercase-2.3-big.txt
# directory-list-lowercase-2.3-medium.txt
uploads/affwp-debug.log
certs/server.key
server.key
.CSV
.PDF
.README.md.bud
.action
.actionScriptProperties
.angular-cli.json
.apport-ignore.xml
@TvMpt
TvMpt / googledork1
Last active January 16, 2025 10:10
"example.com" site:bitpaste.app | site:codebeautify.org | site:codepad.org | site:codepen.io | site:codeshare.io | site:dartpad.dartlang.org | site:dotnetfiddle.net | site:dpaste.com | site:dpaste.org | site:dumpz.org | site:gitlab.com | site:hastebin.com | site:heypasteit.com | site:ide.codingblocks.com | site:ide.geeksforgeeks.org | site:ideone.com | site:jsbin.com | site:jsfiddle.net | site:jsitor.com | site:justpaste.it | site:paste.debian.net | site:paste.fedoraproject.org | site:paste.frubar.net | site:paste.lisp.org | site:paste.opensuse.org | site:paste.org | site:paste.org.ru | site:paste.pound-python.org | site:paste.ubuntu.com | site:paste.xinu.at | site:paste2.org | site:pastebin.com | site:pastebin.fr | site:pastehtml.com | site:phpfiddle.org | site:play.golang.org | site:repl.it | site:rextester.com | site:slexy.org | site:snipplr.com | site:snipt.net | site:stackoverflow.com | site:textsnip.com | site:trello.com | site:trello.com | site:try.ceylon-lang.org
site:optus.com.au "Internal Use On
@0x240x23elu
0x240x23elu / SAPwordlists.txt
Created November 22, 2020 05:47
SAP Wordlist - SAP fuzz
/admin/admin.js
/admin/appinfo.jsp
/admin/cache_stats.jsp
/admin/catalogcache.jsp
/admin/ccms/customizing.jsp
/admin/ccms/result.jsp
/admin/ccms/sendFailure.jsp
/ecall/jsp/customer/login/login.jsp
/ecall/jsp/customer/upload/upload.jsp
/user/admin/index.jsp
#!/bin/bash
RED=$(tput setaf 1)
GREEN=$(tput setaf 2)
BLUE=$(tput setaf 4)
RESET=$(tput sgr0)
AMASS_VERSION=3.8.2