Skip to content

Instantly share code, notes, and snippets.

View six2dez's full-sized avatar
🐧
Hack 'em all

six2dez six2dez

🐧
Hack 'em all
View GitHub Profile
@six2dez
six2dez / sub_brute.txt
Created February 15, 2023 19:54
Subdomains wordlist for bruteforcing EASM workshop
www
tiukata
sivupolku
manailla
tevanaketeollisuus
reseptori
hekumallisesti
massaluku
velli
pikkupappila
@six2dez
six2dez / subs_perms.txt
Created February 15, 2023 19:58
Permutations wordlist for bruteforcing EASM workshop
dev
main
prod
test
docs
wiki
info
site
user
eng
@six2dez
six2dez / Azure_cleaning_commands.md
Created May 23, 2023 09:02
Azure cleaning commands

Public IPs

az resource delete --ids $(az network public-ip list --query '[?ipAddress==`null`].[id]' -o tsv)

Network Security Groups

az resource delete --ids $(az network public-ip list --query '[?ipAddress==`null`].[id]' -o tsv)

Network Interfaces

@six2dez
six2dez / config.ini
Created June 6, 2024 08:16
amass v3 config.ini
# Copyright © by Jeff Foley 2017-2023. All rights reserved.
# Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file.
# SPDX-License-Identifier: Apache-2.0
# Should results only be collected passively and without DNS resolution? Not recommended.
#mode = passive
# Would you like to use active techniques that communicate directly with the discovered assets,
# such as pulling TLS certificates from discovered IP addresses and attempting DNS zone transfers?
#mode = active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@six2dez
six2dez / jsluice_patterns.json
Created April 30, 2025 11:32
jsluice patterns
[
{
"name": "base64",
"value": "(eyJ|YTo|Tzo|PD[89]|rO0)[%a-zA-Z0-9+/]+={0,2}",
"severity": "low"
},
{
"name": "genericSecret",
"key": "\\b(?:[A-Z_]{2,}|[a-z0-9_]+_[a-z0-9_]+)(secret|private|key)\\b",
"value": "[%a-zA-Z0-9+/]{16,}"