Skip to content

Instantly share code, notes, and snippets.

View scumdestroy's full-sized avatar
⛓️
Blood of heroes is closer to the Lord than ink of scholars or prayers of pious.

Jann Moon scumdestroy

⛓️
Blood of heroes is closer to the Lord than ink of scholars or prayers of pious.
View GitHub Profile
@scumdestroy
scumdestroy / search-n-squeal.sh
Created February 19, 2024 16:10
Search'N'Squeal : Bash script that searches a list of dorks on Github and notifies if new search result has appeared
#!/bin/sh
# func to do the search w/ curl
# syntax `perform_search anti-fur_APIKEY gh_APIKEYAPIKEYAPIKEY`
perform_search() {
local search_term="$1"
local api_key="$2"
curl -s -H "Authorization: token $api_key" "https://api.github.com/search/repositories?q=$search_term" | jq '.items[].html_url'
}
WordPress: /wp-admin
Drupal: /admin
Joomla: /administrator
Magento: /admin
Concrete5: /dashboard
SilverStripe: /admin
Textpattern: /textpattern
MODX: /manager
Radiant CMS: /admin
Contao: /contao
#!/bin/sh
# Hey there my friend. If you are not JANN, you will likely need to update this script with the location of discraper.py
# May this tool help you be two shakes of a lamb's tail lazier and leave a little more room in your mind for remembering statistics about CENSOREDINFORMATION for your grocery store cashiers
if [ -z "$1" ]; then
echo "Please provide a URL as an argument."
exit 1
fi
import sys
import base64
if len(sys.argv) != 3:
print("Usage: python script.py users_file passwords_file")
sys.exit(1)
users_filename = sys.argv[1]
passwords_filename = sys.argv[2]
<link rel=attachment href=”file:///etc/passwd”>
#!/bin/sh
# Turns `jsluice urls` output into a wordlist you can use for fuzzing
# Usage: cat urls.txt | jsluice urls | jslclean.sh | tee wordlist-for-fuzzing.txt
jq .url | sort -u | sed 's/\"//g' | sed 's/^\///g'
#!/usr/bin/env python3
'''
Greetings bug-slaying brothers of the pythonian blood. This script takes my httpx output after slamming in a bunch of subdomains
and organizes it so its a bit easier to read and work with.
The HTTPX payload I use first is:
httpx -sc -cl -title -bp -server -td -ip -cname -asn -cdn -vhost -fhr | anew httpx-quicc
This script will organize the data by status code and then from smallest to largest for each status code
#!/usr/bin/env python3
'''
Get the excellent GoLinkFinder tool via github.com/0xsha/GoLinkFinder
... based on my boy here: https://github.com/GerbenJavado/LinkFinder
Anyways, this gives an excellent clean and parsed output after running GoLinkFinder on a gang of urls.
use this like:
python3 golinkfinderx.py urls.txt
'''