maverickNerd

# Stroing js files per domain in a jsscript dir and then all_jsscript can be used for other functions like get endpoints and wordlists as before, no need to change anything
gatherjsfiles(){
mkdir -p jsscript
for url in $(cat hosts.txt)
do
    domain=$(echo $url | unfurl -u format "%d")
    echo $url | gau | grep -iE "\.js$" | sort -u | httpx -status-code -silent | grep '200' | awk '{print $1}' > jsscript/"$domain".txt
    echo $url | waybackurls | grep -iE "\.js$" | sort -u | httpx -status-code -silent | grep '200' | awk '{print $1}' >> jsscript/"$domain".txt
    echo $url | subjs | httpx -status-code -silent | grep '200' | awk '{print $1}' >> jsscript/"$domain".txt
    echo $url | hakrawler -js -plain -depth 2 -insecure | grep -iE "\.js$" | httpx -status-code -silent | grep '200' | awk '{print $1}' >> jsscript/"$domain".txt

maverickNerd

import sys
import requests
from ipaddress import ip_network, ip_address

def output_valid_ips(ips):
    ipvs4 = "https://www.cloudflare.com/ips-v4"
    ipvs6 = "https://www.cloudflare.com/ips-v6"

    ipranges = requests.get(ipvs4).text.split("\n")[:-1]  # removing last trailing space
    ipranges += requests.get(ipvs6).text.split("\n")[

maverickNerd

0 0 * * * find ~/assets -maxdepth 2 -type f -name "daily" -executable -exec sh -c 'cd $(dirname {}) && ./daily' \;
30 18 * * * /root/tools/automateAll/chaos.sh
15 19 * * * /root/tools/continuous-nuclei/run -l /root/tools/automateAll/chaos-host.txt

maverickNerd

pip3 install goop

wget https://bitbucket.org/ariya/phantomjs/downloads/phantomjs-2.1.1-linux-x86_64.tar.bz2

    bzip2 -d phantomjs-2.1.1-linux-x86_64.tar.bz2

    tar -xvf phantomjs-2.1.1-linux-x86_64.tar

    cp phantomjs-2.1.1-linux-x86_64/bin/phantomjs /usr/loca/bin/phantomjs

maverickNerd

.0
.1
.2
.3
.tar
.tgz
.zip
.tar.gz
.rar
.cache

maverickNerd

for /r %%i in (*.md) do pandoc --to=docx -o "%%~dpni.docx" "%%~fi"

REM or if you want to ru n directly in cmd prompt
REM for /r %i in (*.md) do pandoc --to=docx -o "%~dpni.docx" "%~fi"

maverickNerd

http://acrvw1.acappellarecords.com/
http://adidas-supercourt.withspotify.com/
http://annoyanceindex.com/
http://apresolve.spotify.com/
http://art.loudr.fm/
http://booking.spotify.net/
http://cdn.acappellarecords.com/
http://cdn.gimletmedia.com/
http://cetaphilmoments.withspotify.com/
http://chompers.dental/

maverickNerd

The Web Application Hacker's Handbook

Web Application Hacker's Handbook Task checklist as a Github-Flavored Markdown file

Contents

• Recon and analysis
• Test handling of access
• Test handling of input
• Test application logic
• Assess application hosting
• Miscellaneous tests