Skip to content

Instantly share code, notes, and snippets.

@indy-singh
Last active July 24, 2023 08:42
Show Gist options
  • Save indy-singh/11c85ec7658c0f8f9e667cfc68e7a2d1 to your computer and use it in GitHub Desktop.
Save indy-singh/11c85ec7658c0f8f9e667cfc68e7a2d1 to your computer and use it in GitHub Desktop.
curl.exe -LORJ https://haveibeenpwned.com/api/v3/breaches
jq.exe .[] breaches | jq.exe -r .Domain | sort.exe | uniq.exe | awk.exe 'NF' | awk.exe '$0=$0"/.well-known/security.txt"' > urls.txt
xargs -n 1 curl.exe --location --head --max-time 1 -w "%%{http_code} %%{content_type} %%{url}\n" -o NUL -s < urls.txt
@indy-singh
Copy link
Author

If you append | grep 200 | grep -v -e "html":-

200 text/plain; charset=UTF-8 8fit.com/.well-known/security.txt
200 text/plain; charset=UTF-8 adobe.com/.well-known/security.txt
200 text/plain;charset=UTF-8 ancestry.com/.well-known/security.txt
200  avvo.com/.well-known/security.txt
200 text/plain badoo.com/.well-known/security.txt
200 text/plain; charset=utf-8 dailymotion.com/.well-known/security.txt
200 text/plain deezer.com/.well-known/security.txt
200 text/plain dropbox.com/.well-known/security.txt
200 text/plain; charset=UTF-8 ethereum.org/.well-known/security.txt
200 application/json eyeem.com/.well-known/security.txt
200 text/plain;charset=utf-8 facebook.com/.well-known/security.txt
200 text/plain; charset=UTF-8 gemini.com/.well-known/security.txt
200 text/plain jobandtalent.com/.well-known/security.txt
200 text/plain knuddels.de/.well-known/security.txt
200 text/plain linkedin.com/.well-known/security.txt
200 text/plain;charset=UTF-8 mall.cz/.well-known/security.txt
200 text/plain mangadex.org/.well-known/security.txt
200 text/plain; charset=UTF-8 ovh.com/.well-known/security.txt
200 text/plain; charset=utf-8 patreon.com/.well-known/security.txt
200 text/plain plex.tv/.well-known/security.txt
200 text/plain; charset=UTF-8 promofarma.com/.well-known/security.txt
200 text/plain; charset=utf-8 robinhood.com/.well-known/security.txt
200 text/plain roblox.com/.well-known/security.txt
200 text/plain terravision.eu/.well-known/security.txt
200 text/plain; charset=utf-8 truckersmp.com/.well-known/security.txt
200 text/plain tumblr.com/.well-known/security.txt
200 text/plain;charset=utf-8 twitter.com/.well-known/security.txt
200  vbulletin.com/.well-known/security.txt
200 text/plain yahoo.com/.well-known/security.txt

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment