WAPT-https://github.com/KathanP19/HowToHunt/blob/master/CheckList/Web_Checklist_by_Chintan_Gurjar.pdf
Authenication-https://github.com/HolyBugx/HolyTips/blob/main/Checklist/Authentication.pdf
Oauth Misconfiguration-https://binarybrotherhood.io/oauth2_threat_model.html
File Upload-https://github.com/HolyBugx/HolyTips/blob/main/Checklist/File%20Upload.pdf
| Filter | Description | Example |
|---|---|---|
| allintext | Searches for occurrences of all the keywords given. | allintext:"keyword" |
| intext | Searches for the occurrences of keywords all at once or one at a time. | intext:"keyword" |
| inurl | Searches for a URL matching one of the keywords. | inurl:"keyword" |
| allinurl | Searches for a URL matching all the keywords in the query. | allinurl:"keyword" |
| intitle | Searches for occurrences of keywords in title all or one. | intitle:"keyword" |
| # | |
| # CORS header support | |
| # | |
| # One way to use this is by placing it into a file called "cors_support" | |
| # under your Nginx configuration directory and placing the following | |
| # statement inside your **location** block(s): | |
| # | |
| # include cors_support; | |
| # | |
| # As of Nginx 1.7.5, add_header supports an "always" parameter which |
| # | |
| # Configuration files for Manjaro i3 on Lenovo Yoga 2 pro | |
| # to scale properly on HiDPI (3200x1800) | |
| # | |
| ##################################################### | |
| ~/.profile # | |
| ##################################################### | |
| # UI element scaling, icons | |
| export GDK_SCALE=2 |
These commands generate and use private keys in unencrypted binary (not Base64 “PEM”) PKCS#8 format. The PKCS#8 format is used here because it is the most interoperable format when dealing with software that isn't based on OpenSSL.
OpenSSL has a variety of commands that can be used to operate on private
key files, some of which are specific to RSA (e.g. openssl rsa and
openssl genrsa) or which have other limitations. Here we always use
| #!/usr/bin/perl | |
| use utf8; | |
| use strict; | |
| use warnings; | |
| use Protocol::WebSocket::Handshake::Client; | |
| use Protocol::WebSocket::Frame; | |
| use IO::Socket; | |
| use IO::Select; |
$mod refers to the modifier key (window/command or alt by default depending on config)
startx i3 start i3 from command line$mod+<Enter> open a terminal$mod+d open dmenu (text based program launcher)$mod+r resize mode ( or to leave resize mode)$mod+shift+e exit i3
| airmon-ng start wlan1 | |
| airodump-ng mon0 --bssid 00:16:B6:DA:XX:XX --channel 6 | |
| tshark -i mon0 -o wlan.enable_decryption:TRUE -o wlan.wep_key1:wpa-pwd:<the_wpa_password> -R "http.cookie" -T fields -e http.cookie |