Skip to content

Instantly share code, notes, and snippets.

@gh0sh
Last active November 30, 2022 10:02
Show Gist options
  • Save gh0sh/1d1d9a65aac05a8bad40e92ff25ab4ec to your computer and use it in GitHub Desktop.
Save gh0sh/1d1d9a65aac05a8bad40e92ff25ab4ec to your computer and use it in GitHub Desktop.
Simple script to look for juicy endpoints with gf and gau
#!/usr/bin/env bash
#
# Requirements
# - Golang (for complete bug bounty tools, clone this https://github.com/x1mdev/ReconPi)
# - gau (go get -u github.com/lc/gau)
# - gf (go get -u github.com/tomnomnom/gf)
# - Gf-Patterns (https://github.com/1ndianl33t/Gf-Patterns) - Read the README.md for how to copy json file to ~/.gf/
cd ~/.gf
ls *.json > ~/patterns
cat ~/patterns | cut -d "." -f 1 > ~/gf-patterns
mkdir gfpatterns
mkdir temp
cd temp
echo example.com | gau | sort -u >> waybackdata # if you have subdomains list, can use "cat subdomains.txt | gau | sort -u >> waybackdata"
for patterns in $(~/gf-patterns);
do
cat * | gf $patterns | tee -a ../gfpatterns/$patterns.txt;
done
cd ../gfpatterns
find . -iname "*.txt" -size 0 -delete
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment