m4ll0k

Exposed headers

Service	SSL	status	Response Type	Allowed methods	Allowed headers

m4ll0k

# download webarchive.sh
# bash webarchive.sh example.com
curl -s 'http://web.archive.org/cdx/search/cdx?url=*.$1/*&output=json&collapse=urlkey'|jq ".[][2]"|tr '"' ' '|awk "{print $2}"|tr '://' ' '|awk '{print $2}'

m4ll0k

# by m4ll0k 
# github.com/m4ll0k

import sys
try:
    import jsbeautifier
    import requests
except Exception as e:
    sys.exit(print("{0}.. please download this module/s".format(e)))

m4ll0k

# by m4ll0k
# github.com/m4ll0k
# gist.github.com/m4ll0k

# Usage:
#------ python3 tojson.py https://www.example.com
#------ cat targets.txt | python3 tojson.py 

import requests  as _0x1
import sys       as _0x2

m4ll0k

# -----------------------------
# by m4ll0k (@m4ll0k) 
# github.com/m4ll0k
# ------------------------------
# e.g:
# echo -e "test.example.com\ntest-dev.example.com\nstaging-test.example.com" > targets.txt && python3 getpoint.py targets.txt %FUZZ%
# output:
'''
%FUZZ%.test.example.com
%FUZZ%.test-dev.example.com

m4ll0k

`
~/
~
ים
   
 
___
__
_

m4ll0k

.
..
........
@
*
*.*
*.*.*
🐎

m4ll0k

# replace $mytarget with your target
gau $mytarget|egrep -iv '\.json'|grep -iE '\.js'|antiburl|awk '{print $4}' | xargs -I %% bash -c 'python3 SecretFinder.py -i %% -o cli'

# use -r option for extract anything

gau $mytarget|egrep -iv '\.json'|grep -iE '\.js'|antiburl|awk '{print $4}' | xargs -I %% bash -c 'python3 SecretFinder.py -i %% -o cli -r "$anything"'

m4ll0k

undefined
undef
null
NULL
(null)
nil
NIL
true
false
True

m4ll0k

# github.com/m4ll0k (@m4ll0k2) 

'''
Steps:

0. Make dir like chaos 'mkdir chaos'
1. Download this script in choas dir 'wget https://..'
2. Now: 'python3 choas.py |sort -u > dns_wordlist.txt'
'''