m4ll0k (mallok) m4ll0k

## readme.md

      
              1 file
            
          
              0 forks
            
          
                0 comments
              
            
              0 stars
            
          
                m4ll0k
                / readme.md
            
            
              Created
              April 3, 2020 11:48
                — forked from jimmywarting/readme.md
            
              
                Cors proxies
              
          
 Exposed headers

    
        Service
        SSL
        status
        Response Type
        Allowed methods
        Allowed headers
  

## all.txt

.
..
........
@
*
*.*
*.*.*
ðŸŽ

## gist:c33c3bac057584642c8a63144888e3d1
# replace $mytarget with your target
gau $mytarget|egrep -iv '\.json'|grep -iE '\.js'|antiburl|awk '{print $4}' | xargs -I %% bash -c 'python3 SecretFinder.py -i %% -o cli'

# use -r option for extract anything

gau $mytarget|egrep -iv '\.json'|grep -iE '\.js'|antiburl|awk '{print $4}' | xargs -I %% bash -c 'python3 SecretFinder.py -i %% -o cli -r "$anything"'

## content_discovery_all.txt
`
~/
~
×™×


___
__
_

## getpoint.py
# -----------------------------
# by m4ll0k (@m4ll0k)
# github.com/m4ll0k
# ------------------------------
# e.g:
# echo -e "test.example.com\ntest-dev.example.com\nstaging-test.example.com" > targets.txt && python3 getpoint.py targets.txt %FUZZ%
# output:
'''
%FUZZ%.test.example.com
%FUZZ%.test-dev.example.com

## gist:9cf22d4c76dbe0e1a0cc874f12c04963
Use: for testing against email regex
ref: http://codefool.tumblr.com/post/15288874550/list-of-valid-and-invalid-email-addresses


List of Valid Email Addresses

email@example.com
firstname.lastname@example.com
email@subdomain.example.com
firstname+lastname@example.com

## chaos.py
# github.com/m4ll0k (@m4ll0k2)

'''
Steps:

0. Make dir like chaos 'mkdir chaos'
1. Download this script in choas dir 'wget https://..'
2. Now: 'python3 choas.py |sort -u > dns_wordlist.txt'
'''

## nuclei-templates-delete.py

import os,sys,yaml,argparse

# example
# python nuclei-templates-delete.py -p <nuclei-templates-dir> -d <id,id1,id2> or <ids.txt file>


ids = []
nuclei_template_path = ''

## tojson.py
# by m4ll0k
# github.com/m4ll0k
# gist.github.com/m4ll0k

# Usage:
#------ python3 tojson.py https://www.example.com
#------ cat targets.txt | python3 tojson.py

import requests  as _0x1
import sys       as _0x2

## firebase_apiKeys_testing.html
<!DOCTYPE html>
<html>
<head>
	<title></title>
</head>
<body>

    <script src="https://www.gstatic.com/firebasejs/7.6.1/firebase-app.js"></script>

    <!-- If you enabled Analytics in your project, add the Firebase SDK for Analytics -->
	# replace $mytarget with your target
	gau $mytarget\|egrep -iv '\.json'\|grep -iE '\.js'\|antiburl\|awk '{print $4}' \| xargs -I %% bash -c 'python3 SecretFinder.py -i %% -o cli'

	# use -r option for extract anything

	gau $mytarget\|egrep -iv '\.json'\|grep -iE '\.js'\|antiburl\|awk '{print $4}' \| xargs -I %% bash -c 'python3 SecretFinder.py -i %% -o cli -r "$anything"'
	# -----------------------------
	# by m4ll0k (@m4ll0k)
	# github.com/m4ll0k
	# ------------------------------
	# e.g:
	# echo -e "test.example.com\ntest-dev.example.com\nstaging-test.example.com" > targets.txt && python3 getpoint.py targets.txt %FUZZ%
	# output:
	'''
	%FUZZ%.test.example.com
	%FUZZ%.test-dev.example.com
	Use: for testing against email regex
	ref: http://codefool.tumblr.com/post/15288874550/list-of-valid-and-invalid-email-addresses


	List of Valid Email Addresses

	email@example.com
	firstname.lastname@example.com
	email@subdomain.example.com
	firstname+lastname@example.com
	# github.com/m4ll0k (@m4ll0k2)

	'''
	Steps:

	0. Make dir like chaos 'mkdir chaos'
	1. Download this script in choas dir 'wget https://..'
	2. Now: 'python3 choas.py \|sort -u > dns_wordlist.txt'
	'''
	# by m4ll0k
	# github.com/m4ll0k
	# gist.github.com/m4ll0k

	# Usage:
	#------ python3 tojson.py https://www.example.com
	#------ cat targets.txt \| python3 tojson.py

	import requests as _0x1
	import sys as _0x2
	<!DOCTYPE html>
	<html>
	<head>
	<title></title>
	</head>
	<body>

	<script src="https://www.gstatic.com/firebasejs/7.6.1/firebase-app.js"></script>

	<!-- If you enabled Analytics in your project, add the Firebase SDK for Analytics -->