aufzayed

#!/usr/bin/env python3
import re, sys, json


# usage: dorg.py subdomains_list.txt domain_name
# python3 dorg.py example_com_subs.txt example.com

file_path = sys.argv[1]
domain = sys.argv[2]
pattern = '[a-zA-Z0-9\-]+\.' + domain.replace('.', '\.')

aufzayed

# install lynx: sudo apt install lynx
# lynx -dump: dump the first file to stdout and exit
# awk '/http/{print $2}': print only urls
# grep -E  "https://example\.com": print only URLs that belong to example.com
# do not forget to use the URL schema in the grep pattern to avoid subdomains


lynx -dump https://example.com/ | awk '/http/{print $2}' | grep -E 'https://example\.com' | subjs | sort -u

aufzayed

# requirements:
# gf -> https://github.com/tomnomnom/gf
# gf patterns to find leaked tokens and secrets -> https://github.com/emadshanab/Gf-Patterns-Collection
# subjs -> https://github.com/lc/subjs
# gau -> https://github.com/lc/gau
# nuclei -> https://github.com/projectdiscovery/nuclei
# hakcheckurl -> https://github.com/hakluke/hakcheckurl

# note: before you run the script, edit your gf patterns and remove all grep 'H' and 'n' flag and add the 'h' flag

aufzayed

# the required tools
# subjs -> https://github.com/lc/subjs
# js-beautify -> https://github.com/beautify-web/js-beautify
# haklistgen -> https://github.com/hakluke/haklistgen


haklist() {
    
    # declare TMPDIR variable
    TMPDIR="/tmp/haklist"