Serhii serhiijko

Toolbox

Tools I use on a daily basis:

dnsmap - DNS record enumeration using dictionary brute forcing. I have a host list. Find all kinds of infrastructure with this tool. Opensource.
Spiderfoot - Full intelligence gathering suite. Open source. Nice UI.
Arachni - Web application scanner. Has a nice web interface and can run distributely.
WPScan - WordPress specific attack tool

PHP | Laravel | Web Scraping

Awesome PHP

A curated list of amazingly awesome PHP libraries, resources and shiny things.

How to setup Let's Encrypt for Nginx on Ubuntu 18.04 (including IPv6, HTTP/2 and A+ SLL rating)

Virtual hosts

Let's say you want to host domains first.com and second.com.

Create folders for their files:

Use wget to mirror a single page and its visible dependencies (images, styles)

Graphic via State of Florida CFO Vendor Payment Search (flair.myfloridacfo.com)

This is a quick command I use to snapshot webpages that have a fun image I want to keep for my own collection of WTFViz. Why not just right-click and save the image? Oftentimes, the webpage in which the image is embedded contains necessary context, such as captions and links to important documentation just incase you forget what exactly that fun graphic was trying to explain.

	Here is my public file code
	<?php

	/**
	* The public-facing functionality of the plugin.
	*
	* @link
	* @since 1.0.0
	*
	* @package plugin_name

	import requests
	import sys
	import json


	def waybackurls(host, with_subs):
	if with_subs:
	url = 'http://web.archive.org/cdx/search/cdx?url=.%s/&output=json&fl=original&collapse=urlkey' % host
	else:
	url = 'http://web.archive.org/cdx/search/cdx?url=%s/*&output=json&fl=original&collapse=urlkey' % host

	# Bash script to scan PHP files for potential vulnerabilities
	#
	# Currently being copy-pasted to bootstrap code audits for WordPress plugins
	#
	# Based off of @dustyfresh's https://github.com/dustyfresh/PHP-vulnerability-audit-cheatsheet
	#


	# XSS
	clear && \

	<?php
	/**
	* Enqueue scripts and styles.
	*
	* @since 1.0.0
	*/
	function ja_global_enqueues() {

	wp_enqueue_style(
	'jquery-auto-complete',

	#301 Redirects for .htaccess

	#Redirect a single page:
	Redirect 301 /pagename.php http://www.domain.com/pagename.html

	#Redirect an entire site:
	Redirect 301 / http://www.domain.com/

	#Redirect an entire site to a sub folder
	Redirect 301 / http://www.domain.com/subfolder/