khanjanny

ab_idproot
accept-ch
accept-ch-lifetime
accept-ranges
access-control-allow-credentials
access-control-allow-headers
access-control-allow-method
access-control-allow-methods
access-control-allow-origin
access-control-expose-headers

khanjanny

export GOPATH=$HOME/go
export GOROOT=/usr/local/go
export PATH=$PATH:$GOROOT/bin:$GOPATH/bin

khanjanny

root:!:18816:0:99999:7:::
daemon:*:18667:0:99999:7:::
bin:*:18667:0:99999:7:::
sys:*:18667:0:99999:7:::
sync:*:18667:0:99999:7:::
games:*:18667:0:99999:7:::
man:*:18667:0:99999:7:::
lp:*:18667:0:99999:7:::
mail:*:18667:0:99999:7:::
news:*:18667:0:99999:7:::

khanjanny

share = true
#mode = passive
mode = active

#output_directory = amass
scripts_directory = /home/khan/scripts

maximum_dns_queries = 10000

[resolvers]

khanjanny

The Web Application Hacker's Handbook

Web Application Hacker's Handbook Task checklist as a Github-Flavored Markdown file

Contents

• Recon and analysis
• Test handling of access
• Test handling of input
• Test application logic
• Assess application hosting
• Miscellaneous tests

khanjanny

#!/bin/bash
#This one is demo you can make your own stracture for yourself just add dir and file.... have fun

mkdir ~/work/$1
mkdir ~/work/$1/finaldata
mkdir ~/work/$1/finaldata/portscan
mkdir ~/work/$1/domains
mkdir ~/work/$1/recondata
mkdir ~/work/$1/needcheck
touch ~/work/$1/finaldata/subdomains.txt

khanjanny

#!/bin/bash
echo "[+] Installing XFCE4, this will take a while"
sudo apt update
sudo apt dist-upgrade -y --force-yes
sudo apt --yes --force-yes install kali-desktop-xfce xorg xrdp
echo "[+] Configuring XRDP to listen on port 3390 (but not starting the service)..."
echo "[+] To start the service run: sudo /etc/init.d/xrdp start"
sudo sed -i 's/port=3389/port=3390/g' /etc/xrdp/xrdp.ini
sudo echo "alias startx=\"sudo /etc/init.d/xrdp start\"" > ~/.bash_aliases
sudo echo "alias stopx=\"sudo /etc/init.d/xrdp stop\"" > ~/.bash_aliases

khanjanny

display:
  error: false
  new: true
  unchanged: false
job_defaults:
  all: {}
  browser: {}
  shell: {}
  url: {}
report:

khanjanny

#!/bin/sh
set -e
#
# This script is meant for quick & easy install via:
#   'curl -sSL https://raw.githubusercontent.com/ysrc/xunfeng/master/install/install.sh | sh'
# or:
#   'wget -qO- https://raw.githubusercontent.com/ysrc/xunfeng/master/install/install.sh | sh'
#
export MONGODB_URL="http://downloads.mongodb.org/linux/mongodb-linux-x86_64-3.4.0.tgz"
export XUNFENG_REPO="https://github.com/ysrc/xunfeng.git"

khanjanny

apt install git gcc make libpcap-dev python-argparse massdns golang python python3 
pip install py-altdns



go get -v github.com/projectdiscovery/subfinder/cmd/subfinder
go get github.com/haccer/subjack
go get -u github.com/rverton/webanalyze/...
go get github.com/tomnomnom/httprobe
go get github.com/tomnomnom/waybackurls