Sam Stepanyan securestep9

## uk_salary_and_tax.csv

          
            salary per year
            monthly in bank
            p.a. equiv
            annual tax
            tax as a % of salary
            monthly tax

            
              12000
              966.32
              11595.84
              404.16
              3.37%
              33.68

            
              24000
              1654.8
              19857.6
              4142.4
              17.26%
              345.2

            
              36000
              2334.8
              28017.6
              7982.4
              22.17%
              665.2

            
              48000
              3014.8
              36177.6
              11822.4
              24.63%
              985.2

            
              60000
              3611.62
              43339.44
              16660.56
              27.77%
              1388.38

            
              72000
              4191.62
              50299.44
              21700.56
              30.14%
              1808.38

            
              84000
              4771.62
              57259.44
              26740.56
              31.83%
              2228.38

            
              96000
              5351.62
              64219.44
              31780.56
              33.10%
              2648.38

            
              108000
              5798.29
              69579.48
              38420.52
              35.57%
              3201.71

## bucket-disclose.sh
#!/bin/bash

# Written by Frans Rosén (twitter.com/fransrosen)
_debug="$2" #turn on debug
_timeout="20"
#you need a valid key, since the errors happens after it validates that the key exist. we do not need the secret key, only access key
_aws_key="AKIA..."
H_ACCEPT="accept-language: en-US,en;q=0.9,sv;q=0.8,zh-TW;q=0.7,zh;q=0.6,fi;q=0.5,it;q=0.4,de;q=0.3"
H_AGENT="user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.146 Safari/537.36"

## ssrf-bypass-headers.txt
Base-Url: 127.0.0.1
Client-IP: 127.0.0.1
Http-Url: 127.0.0.1
Proxy-Host: 127.0.0.1
Proxy-Url: 127.0.0.1
Real-Ip: 127.0.0.1
Redirect: 127.0.0.1
Referer: 127.0.0.1
Referrer: 127.0.0.1
Refferer: 127.0.0.1
salary per year	monthly in bank	p.a. equiv	annual tax	tax as a % of salary	monthly tax
12000	966.32	11595.84	404.16	3.37%	33.68
24000	1654.8	19857.6	4142.4	17.26%	345.2
36000	2334.8	28017.6	7982.4	22.17%	665.2
48000	3014.8	36177.6	11822.4	24.63%	985.2
60000	3611.62	43339.44	16660.56	27.77%	1388.38
72000	4191.62	50299.44	21700.56	30.14%	1808.38
84000	4771.62	57259.44	26740.56	31.83%	2228.38
96000	5351.62	64219.44	31780.56	33.10%	2648.38
108000	5798.29	69579.48	38420.52	35.57%	3201.71
	#!/bin/bash

	# Written by Frans Rosén (twitter.com/fransrosen)
	_debug="$2" #turn on debug
	_timeout="20"
	#you need a valid key, since the errors happens after it validates that the key exist. we do not need the secret key, only access key
	_aws_key="AKIA..."
	H_ACCEPT="accept-language: en-US,en;q=0.9,sv;q=0.8,zh-TW;q=0.7,zh;q=0.6,fi;q=0.5,it;q=0.4,de;q=0.3"
	H_AGENT="user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.146 Safari/537.36"
	Base-Url: 127.0.0.1
	Client-IP: 127.0.0.1
	Http-Url: 127.0.0.1
	Proxy-Host: 127.0.0.1
	Proxy-Url: 127.0.0.1
	Real-Ip: 127.0.0.1
	Redirect: 127.0.0.1
	Referer: 127.0.0.1
	Referrer: 127.0.0.1
	Refferer: 127.0.0.1