felipecaon
/ axiom_rule_httpx.json
Last active
February 27, 2024 18:14
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "builders": [], | |
| "provisioners": [ | |
| { | |
| "type": "file", | |
| "source": "./configs", | |
| "destination": "/tmp/configs" | |
| }, | |
| { | |
| "execute_command": "chmod +x {{ .Path }}; {{ .Vars }} sudo -E sh '{{ .Path }}'", |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import argparse | |
| import requests | |
| # Define the API endpoint and parameters | |
| base_url = "https://otx.alienvault.com/api/v1/indicators/domain/{domain}/url_list?limit=500&page={page}" | |
| current_domain = "" | |
| def make_request(domain, page): | |
| while True: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [general] | |
| colors = true | |
| [http] | |
| headers = [ | |
| "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0" | |
| ] | |
| [https] | |
| headers = [ |
felipecaon
/ httpheaders.txt
Created
April 13, 2022 01:09
List of HTTP headders to be used as injection
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Client-IP | |
| Forwarded-For-Ip | |
| Forwarded-For | |
| Forwarded | |
| True-Client-IP | |
| X-Client-IP | |
| X-Custom-IP-Authorization | |
| X-Forward-For | |
| X-Forward | |
| X-Forwarded-By |
felipecaon
/ pathtransversal
Last active
October 11, 2022 01:08
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| | Char | Encoded | | |
| | --- | --- | | |
| | space | %20 | | |
| | / | %2f | | |
| | \ | %5c | | |
| | % | %25 | | |
| | . | %2e | | |
| | f | %66 | | |
| | e | %65 | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import requests | |
| apikey = "" | |
| page = 1 | |
| url = f"https://api.whoxy.com/?key={apikey}&reverse=whois&identifier=filter&mode=micro&page={page}" | |
| response = requests.get(url) | |
| file_path = 'company.txt' |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [ | |
| { | |
| "name": "ADMIN_PASSWORD", | |
| "value": "(admin).+(secret|token|key|password).+" | |
| }, | |
| { | |
| "name": "AWS API Gateway", | |
| "value": "[0-9a-z]+.execute-api.[0-9a-z.-_]+.amazonaws.com" | |
| }, | |
| { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ECONOMIZE10 | |
| ECONOMIZE15 | |
| ECONOMIZE20 | |
| ECONOMIZE25 | |
| ECONOMIZE30 | |
| ECONOMIZE50 | |
| ECONOMIZE100 | |
| ECONOMIZE2024 | |
| DESCONTO10 | |
| DESCONTO15 |