Skip to content

Instantly share code, notes, and snippets.

@Spy0x7
Last active July 8, 2022 13:48
Show Gist options
  • Star 5 You must be signed in to star a gist
  • Fork 4 You must be signed in to fork a gist
  • Save Spy0x7/0c356f1e23621cda29dfbf24d80aabf6 to your computer and use it in GitHub Desktop.
Save Spy0x7/0c356f1e23621cda29dfbf24d80aabf6 to your computer and use it in GitHub Desktop.
assetfinder site.com | gau|egrep -v '(.css|.png|.jpeg|.jpg|.svg|.gif|.wolf)'|while read url; do vars=$(curl -s $url | grep -Eo "var [a-zA-Zo-9_]+" |sed -e 's, 'var','"$url"?',g' -e 's/ //g'|grep -v '.js'|sed 's/.*/&=xss/g'):echo -e "\e[1;33m$url\n" "\e[1;32m$vars";done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment