Skip to content

Instantly share code, notes, and snippets.

@ryelhunter
ryelhunter / content_discovery_all.txt
Created August 24, 2025 23:40 — forked from jhaddix/content_discovery_all.txt
a masterlist of content discovery URLs and files (used most commonly with gobuster)
This file has been truncated, but you can view the full file.
`
~/
~
ים
___
__
_
javascript: (function() {
var scripts = document.getElementsByTagName("script"),
regex = /(?<=(\"|\%27|\`))\/[a-zA-Z0-9_?&=\/\-\#\.]*(?=(\"|\'|\%60))/g;
const results = new Set;
for (var i = 0; i < scripts.length; i++) {
var t = scripts[i].src;
"" != t && fetch(t).then(function(t) {
return t.text()
}).then(function(t) {
var e = t.matchAll(regex);
echo ""
echo "************ Github Dork Links (must be logged in) *******************"
echo ""
echo " password"
echo "https://github.com/search?q="hackertarget.site"+password&type=Code"
echo "https://github.com/search?q=""hackertarget""+password&type=Code"
echo ""
echo " npmrc _auth"
| Char | Encoded |
| --- | --- |
| space | %20 |
| / | %2f |
| \ | %5c |
| % | %25 |
| . | %2e |
| f | %66 |
| e | %65 |
@ryelhunter
ryelhunter / httpheaders.txt
Created August 17, 2025 23:30 — forked from felipecaon/httpheaders.txt
List of HTTP headders to be used as injection
Client-IP
Forwarded-For-Ip
Forwarded-For
Forwarded
True-Client-IP
X-Client-IP
X-Custom-IP-Authorization
X-Forward-For
X-Forward
X-Forwarded-By
#!/bin/bash
while IFS= read -r ORG_NAME; do
echo "[*] Processing organization: $ORG_NAME"
mkdir -p "$ORG_NAME"
cd "$ORG_NAME" || exit
#####################################
# 1. Clone all non-fork repos
#####################################