dzmitry-savitski

#!/usr/bin/python
# Author: Dzmitry Savitski
# Get a new version at: https://github.com/dzmitry-savitski/vhost_bruteforcer

from __future__ import print_function
import requests
import urllib3
import argparse
import netaddr
from termcolor import colored

dzmitry-savitski

#!/bin/bash

for domain in $(cat $1); 
do
    # -L - follow redirect
    # echo [http://$domain] - $(curl -w '%{size_download}' --output /dev/null -s http://$domain);
    echo [https://$domain] - $(curl -w '%{size_download}' -L --insecure --max-time 2 --output /tmp/out/$domain.https.html -s https://$domain);
done;

dzmitry-savitski

from __future__ import print_function
from recon.core.module import BaseModule
import urllib
import sys
# List of modifications:
# - swaped from and to or condition
# - added option to invers True/False strings
# - headers are now also checked for unique string
# - connection exceptions are handled

dzmitry-savitski

package com.dsavitski.vulnerable.controllers;

import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.ResponseBody;

import javax.servlet.AsyncContext;
import javax.servlet.ServletInputStream;
import javax.servlet.ServletOutputStream;