Skip to content

Instantly share code, notes, and snippets.

@securITymania
Last active March 14, 2020 09:51
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save securITymania/bb6eeda9fe850237ae5ba36e7f16be1b to your computer and use it in GitHub Desktop.
Save securITymania/bb6eeda9fe850237ae5ba36e7f16be1b to your computer and use it in GitHub Desktop.
var s = ' !"#$%&\'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~';
for (var i = 0; i < s.length; i++) {
char = s.charAt(i);
string = 'https://evil.com.'+char+'.example.com';
try {
const url = new URL(string);console.log("[+] " + string + " -> " + url.hostname);
} catch {
console.log("[!] " + string + " -> ERROR");
}
}
//source bugs.xdavidhu.me
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment