startfinishstar1975 ahmetburakakay

The Top Hacker Methodologies & Tools Notes

Nuclei Templates

(There might be some duplicates...)

To run the project, you will need to install the following programs:

This is a simple guide to perform javascript recon in the bugbounty

The first step is to collect possibly several javascript files (more files = more paths,parameters -> more vulns)



	echo ""
	echo "********** Github Dork Links (must be logged in) *****************"
	echo ""
	echo " password"
	echo "https://github.com/search?q="hackertarget.site"+password&type=Code"
	echo "https://github.com/search?q=""hackertarget""+password&type=Code"
	echo ""
	echo " npmrc _auth"

	wget https://gist.githubusercontent.com/nullenc0de/bb16be959686295b3b1caff519cc3e05/raw/2016dc0e692821ec045edd5ae5c0aba5ec9ec3f1/api-linkfinder.yaml
	echo https://stripe.com/docs/api \| hakrawler -t 500 -d 10 \|nuclei -t ./linkfinder.yaml -o api.txt
	cat api.txt \|grep url_params \|cut -d ' ' -f 7 \|tr , '\n' \| tr ] '\n' \| tr [ '\n' \|tr -d '"' \|tr -d "'" \|sort -u > api_params.txt
	cat api.txt \|grep relative_links \|cut -d ' ' -f 7 \|tr , '\n' \| tr ] '\n' \| tr [ '\n' \|tr -d '"' \|tr -d "'" \|sort -u > api_link_finder.txt

	# github.com/ndavison

	import requests
	import random
	import string
	from argparse import ArgumentParser


	parser = ArgumentParser(description="Attempts to find hop-by-hop header abuse potential against the provided URL.")
	parser.add_argument("-u", "--url", help="URL to target (without query string)")

	#!/bin/bash
	#
	# crt.sh sub-domain check by 1N3@CrowdShield
	# https://crowdshield.com
	#

	OKBLUE='\033[94m'
	OKRED='\033[91m'
	OKGREEN='\033[92m'
	OKORANGE='\033[93m'