websecresearch’s gists

websecresearch / get-shodan-favicon-hash.py

Created July 8, 2020 15:54 — forked from yehgdotnet/get-shodan-favicon-hash.py

Get Shodan FAVICON Hash

	# https://twitter.com/brsn76945860/status/1171233054951501824
	pip install mmh3

	-----------------------------
	# python 2
	import mmh3
	import requests

	response = requests.get('https://cybersecurity.wtf/favicon.ico')
	favicon = response.content.encode('base64')

websecresearch / HezarSploit.py

Created July 8, 2020 15:50 — forked from Voorivex/HezarSploit.py

	#!/usr/bin/python
	# -- coding: utf-8 --
	import ssl
	import socket
	import os
	import sys
	from argparse import ArgumentParser
	from argparse import RawTextHelpFormatter
	from threading import Thread

websecresearch / bountyscan_setup.sh

Created January 29, 2020 15:04 — forked from jhaddix/bountyscan_setup.sh

	#!/bin/bash
	export DEBIAN_FRONTEND=noninteractive;
	echo "[] Starting Install... []"
	echo "[] Upgrade installed packages to latest []"
	echo -e "\nRunning a package upgrade...\n"
	apt-get -qq update && apt-get -qq dist-upgrade -y
	apt full-upgrade -y
	apt-get autoclean

	echo "[] Install stuff I use all the time []"

websecresearch / Github bash generated search links (from hunter.sh)

Created January 29, 2020 13:41 — forked from jhaddix/Github bash generated search links (from hunter.sh)

Github bash generated search links (from hunter.sh)



	echo ""
	echo "********** Github Dork Links (must be logged in) *****************"
	echo ""
	echo " password"
	echo "https://github.com/search?q=%22$1%22+password&type=Code"
	echo "https://github.com/search?q=%22$without_suffix%22+password&type=Code"
	echo ""
	echo " npmrc _auth"

websecresearch / params.txt

Created January 29, 2020 13:41 — forked from random-robbie/params.txt

websecresearch / cors.txt

Created January 29, 2020 13:41

	Issue detected : CORS misconfiguration amazonlive-portal.amazon.com Payload Send Origin response contains Access-Control-Allow-Origin: null
	Issue detected : CORS misconfiguration amazonlive-portal.amazon.com Payload Send Origin response contains Access-Control-Allow-Origin: https://doesnot.exists
	Issue detected : CORS misconfiguration dexr.amazon.com Payload Send Origin response contains Access-Control-Allow-Origin: null
	Issue detected : CORS misconfiguration dexr.amazon.com Payload Send Origin response contains Access-Control-Allow-Origin: https://doesnot.exists
	Issue detected : CORS misconfiguration internal.campfire.amazon.com Payload Send Origin response contains Access-Control-Allow-Origin: null
	Issue detected : CORS misconfiguration internal-gamma.campfire.amazon.com Payload Send Origin response contains Access-Control-Allow-Origin: null
	Issue detected : CORS misconfiguration internal.campfire.amazon.com Payload Send Origin response contains Access-Control-Allow-Origin: https://doesnot.exists
	Issue dete

websecresearch / null-find.sh

Created January 29, 2020 13:41 — forked from random-robbie/null-find.sh

	#!/bin/bash
	wget https://gist.githubusercontent.com/jhaddix/86a06c5dc309d08580a018c66354a056/raw/96f4e51d96b2203f19f6381c8c545b278eaa0837/all.txt
	amass enum -config config.ini -brute -w all.txt
	wget https://gist.githubusercontent.com/nullenc0de/96fb9e934fc16415fbda2f83f08b28e7/raw/146f367110973250785ced348455dc5173842ee4/content_discovery_nullenc0de.txt
	gobuster -u http://example.com -w content_discovery_nullenc0de.txt

websecresearch / content_nullenc0de.txt

Created January 29, 2020 13:41 — forked from random-robbie/content_nullenc0de.txt

This file has been truncated, but you can view the full file.

websecresearch / Dockerfile

Created January 29, 2020 13:41 — forked from random-robbie/Dockerfile

Burp Browser Docker

	FROM ubuntu:latest

	ENV DEBIAN_FRONTEND noninteractive

	RUN apt-get update -y && \
	apt-get install -y \
	git \
	xvfb \
	x11vnc \
	wget \

websecresearch / s3tko.sh

Created January 29, 2020 13:41 — forked from random-robbie/s3tko.sh

	#!/bin/bash
	touch index.html
	touch error.html
	aws s3api create-bucket --bucket $1 --region us-east-1
	aws s3 website s3://$1/ --index-document index.html --error-document error.html
	aws s3 cp index.html s3://$1 --acl public-read
	aws s3 cp error.html s3://$1 --acl public-read