ihebski

@ IN SOA takengo.com. host.takengo.com. (
2010081401;
28800;
604800;
604800;
86400 );
 
IN NS ns1.takengo.com.
4 IN PTR takengo.com.

ihebski

input {
  file {
    path => ["/var/log/nginx/access.log", "/var/log/nginx/error.log"]
    type => "nginx"
  }
}

filter {
    if [path] =~ "access.log" {
     

ihebski

http_port 80
http_access allow all

ihebski

#!/bin/bash
#
# BIG-IPF5(CVE-2020-5902)
#
# Usage :
# $ echo "host1 host2 host3" | ./scanner
# $ cat myservers | ./scanner
#
servers="$(cat)"

ihebski

#!/bin/bash
#
# CISCO ASA path traversal and Firepower Threat Defense - CVE-2020-3452 
# Payload : @aboul3la
#
# Usage :
# $ echo "host1 host2 host3" | ./scanner
# $ cat myservers | ./scanner
#
servers="$(cat)"

ihebski

#!/bin/bash
#
# Usage :
# $ echo "host1 host2 host3" | ./scanner
# $ cat myservers | ./scanner
#
servers="$(cat)"

for servers in $servers; do
	host $servers | host $servers | cut -d ' ' -f1,4 

ihebski

cat hosts.txt | parallel -j255 'netcat -znv -w 1 {} 80 443 8080 25' &> nc-scan.txt

ihebski

cat subdomains.txt | parallel -j250 'host {} | grep "has address" | cut -d " " -f1,4' | sort -u

ihebski

cat domains.txt | parallel -j250 'nmap -Pn --top-ports 100 -T4 -vv --open -oN results.txt {}'

ihebski

echo subdomains | grep '=' | qsreplace FUZZ\" -a | while read url;do target=$(curl -s -l $url | egrep -o '(FUZZ"|FUZZ\\")'); echo -e "Target:\e[1;33m $url\e[0m" "$target" "\n-------"; done | sed 's/FUZZ"/[Xss Possible] Reflection Found/g'