Skip to content

Instantly share code, notes, and snippets.

View jhaddix's full-sized avatar

Jason Haddix jhaddix

View GitHub Profile
echo ""
echo "************ Github Dork Links (must be logged in) *******************"
echo ""
echo " password"
echo "https://github.com/search?q="hackertarget.site"+password&type=Code"
echo "https://github.com/search?q=""hackertarget""+password&type=Code"
echo ""
echo " npmrc _auth"
@jhaddix
jhaddix / reconftw.cfg
Last active May 11, 2025 09:34
reconFTW config file: NO google/osint, wordlist creation, nuclei js analysis
#################################################################
# reconFTW config file #
#################################################################
# General values
tools=~/Tools # Path installed tools
SCRIPTPATH="$( cd "$(dirname "$0")" >/dev/null 2>&1 ; pwd -P )" # Get current script's path
profile_shell=".$(basename $(echo $SHELL))rc" # Get current shell profile
reconftw_version=$(git rev-parse --abbrev-ref HEAD)-$(git describe --tags) # Fetch current reconftw version
generate_resolvers=false # Generate custom resolvers with dnsvalidator
@jhaddix
jhaddix / ffufone.json
Created March 8, 2023 20:48
Axiom ffuf module to scan one host vertically
[{
"command":"/home/op/go/bin/ffuf -w input -rate 8 -of csv -o _output_/_cleantarget_ -ac -u ",
"ext":"csv",
"threads":"10"
}]
@jhaddix
jhaddix / d4dorks.txt
Last active October 20, 2024 09:23
Diablo 4 Dorks
Search groups explained:
Group 1 "exploit, farm, glitch, cheese, AFK, multibox, dupe, grind" - This search will keep you up to date on "clever use of game mechanics" should you want to be on the bleeding edge.
Group 2 "build OR guide OR nerf" - This wil keep you up to date with classes and builds coming out and ones that are over powered.
Group 3: "unique OR set OR legendary OR gold OR murmuring OR veiled" - will keep you up to date on the currency and gear grind meta.
SEARCH LINKS:
javascript:(function(){var scripts=document.getElementsByTagName("script"),regex=/(?<=(\"|\%27|\`))\/[a-zA-Z0-9_?&=\/\-\#\.]*(?=(\"|\'|\%60))/g,jsRegex=/(?<=(\"|\'|\%60))(?:\/|https?:\/\/)[a-zA-Z0-9_?&=\/\-\#\.]+\.js(?:\?[^"'%60]*)?(?=(\"|\'|\%60))/g;const results=new Set;const paramMap=new Map();const jsFiles=new Set();function processContent(t,src){var e=t.matchAll(regex);for(let r of e){results.add(r[0]);var params=r[0].split('?')[1];if(params){params.split('&').forEach(param=>{var [key,]=param.split('=');if(key){if(!paramMap.has(key)){paramMap.set(key,[]);}paramMap.get(key).push(src||'Inline script or HTML');}});}}var j=t.matchAll(jsRegex);for(let r of j){jsFiles.add(r[0]);}}for(var i=0;i<scripts.length;i++){var t=scripts[i].src;if(t){jsFiles.add(t);fetch(t).then(function(t){return t.text()}).then(text=>processContent(text,t)).catch(function(t){console.log("An error occurred: ",t)});}else{processContent(scripts[i].textContent);}}var pageContent=document.documentElement.outerHTML;processContent(pageContent