Skip to content

Instantly share code, notes, and snippets.

View prinsharma1999's full-sized avatar
🎯
Focusing

prin sharma prinsharma1999

🎯
Focusing
12 followers · 13 following
  • india
View GitHub Profile
@prinsharma1999
prinsharma1999 / sub.sh
Created May 16, 2021 19:17 — forked from cihanmehmet/sub.sh
sub.sh
#!/bin/bash
echo "Online Subdomain Detect Script"
echo "Twitter => https://twitter.com/cihanmehmets"
echo "Github => https://github.com/cihanmehmet"
echo "CURL Subdomain Execute => curl -s -L https://raw.githubusercontent.com/cihanmehmet/sub.sh/master/sub.sh | bash -s bing.com"
echo "██████████████████████████████████████████████████████████████████████████████████████████████████████████████"
if [[ $# -eq 0 ]] ;
then
@prinsharma1999
prinsharma1999 / subdomain_wordlist.md
Created May 16, 2021 19:15 — forked from cihanmehmet/subdomain_wordlist.md
Subdomain Wordlist
@prinsharma1999
prinsharma1999 / proxying-cli-tools.sh
Created April 9, 2021 18:58 — forked from jivoi/proxying-cli-tools.sh
proxying-cli-tools
#######################
### Proxy curl/wget ###
#######################
export http_proxy=localhost:8080
export https_proxy=localhost:8080
curl -k https://ifconfig.io
wget --no-check-certificates https://ifconfig.io
#######################
### Proxy Java JARs ###
@prinsharma1999
prinsharma1999 / BurpSuiteSSLPassTrough.json
Created January 10, 2021 10:17 — forked from vsec7/BurpSuiteSSLPassTrough.json
Filter out the noise
{
"proxy":{
"ssl_pass_through":{
"automatically_add_entries_on_client_ssl_negotiation_failure":false,
"rules":[
{
"enabled":true,
"host":".*\\.google\\.com",
"protocol":"any"
},
@prinsharma1999
prinsharma1999 / BurpDock
Created January 10, 2021 10:08 — forked from r00tdaemon/BurpDock
How to setup Burp Suite inside a docker container. (https://ujjwal96.github.io/blog/2019/06/02/burpdock)
How to setup Burp Suite inside a docker container.
@prinsharma1999
prinsharma1999 / secret_book.md
Created January 10, 2021 10:07 — forked from dwallraff/secret_book.md
Secret Book of Knowledge - from https://github.com/trimstray/the-book-of-secret-knowledge credit: @trimstray

Master

"Knowledge is powerful, be careful how you use it!"

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

@prinsharma1999
prinsharma1999 / github_bugbountyhunting.md
Created January 10, 2021 10:05 — forked from EdOverflow/github_bugbountyhunting.md
My tips for finding security issues in GitHub projects.

GitHub for Bug Bounty Hunters

GitHub repositories can disclose all sorts of potentially valuable information for bug bounty hunters. The targets do not always have to be open source for there to be issues. Organization members and their open source projects can sometimes accidentally expose information that could be used against the target company. in this article I will give you a brief overview that should help you get started targeting GitHub repositories for vulnerabilities and for general recon.

Mass Cloning

You can just do your research on github.com, but I would suggest cloning all the target's repositories so that you can run your tests locally. I would highly recommend @mazen160's GitHubCloner. Just run the script and you should be good to go.

$ python githubcloner.py --org organization -o /tmp/output