Skip to content

Instantly share code, notes, and snippets.

@ffcommax
Last active November 3, 2020 18:37
Show Gist options
  • Save ffcommax/32811f39b965eec82b257a6a5e5db9b5 to your computer and use it in GitHub Desktop.
Save ffcommax/32811f39b965eec82b257a6a5e5db9b5 to your computer and use it in GitHub Desktop.
Recon
https://crt.sh
curl -s https://crt.sh/?q\=%.yahoo\&output\=json | jq -r '.[].name_value' | sort -u | ./httprobe -c 50
build
https://github.com/ffcommax/httprobe
----------------------
site:site.com -www -subdomain
----------------------
assetfinder --subs-only site.com | ./httprobe -c 50 > a.txt
----------------------
git clone https://github.com/maurosoria/dirsearch.git
cd dirsearch
python3 dirsearch.py -u <URL> -e <EXTENSION>
---------------------
python3 linkfinder.py -i sitecom/js -o result.html
----------------------
paramspider
Note : Use python 3.7+
$ git clone https://github.com/devanshbatham/ParamSpider
$ cd ParamSpider
$ pip3 install -r requirements.txt
$ python3 paramspider.py --domain hackerone.com
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment