Bug-Bounty-Oneliners

KO | EN

gitlite — search

#python #react #ai #typescript #llm #go #macos #java #nodejs #awesome #kubernetes #awesome-list #ios #open-source

Bug-Bounty-Oneliners

(★ 23)

Oneliners curated from my experience and from the internet

Bug-Bounty-Oneliners Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Bug-Bounty-Oneliners
Oneliners curated from my experience and from the internet

### Oneliner to get HTTP Titles:(Update! HTTPX does a better job :-) )
```bash
for i in $(cat urls.txt ); do echo "$i | $(curl --connect-timeout 0.5 $i -so - | grep -iPo '(?<=<title>)(.*)(?=</title>)')"; done | tee -a titles.txt
```

### Extract subdomains from IP range:
```bash
nmap IP_range | grep "domain" | awk '{print $5}'
```

### Find subdomains and takeover
```bash
subfinder -d {target} >> domains ; assetfinder -subs-only {target} >> domains ; amass enum -norecursive -noalts -d {target} >> domains ; subjack -w domains -t 100 -timeout 30 -ssl -c ~/fingerprints.json -v 3 >> takeover ;
```
### Extract juicy info from unpacked APK
```bash
apktool d apk;grep -EHim "accesskey|admin|aes|api_key|apikey|checkClientTrusted|crypt|http:|https:|password|pinning|secret|SHA256|SharedPreferences|superuser|token|X509TrustManager|insert into" APKfolder
```
### Gather all urls, send to burp
```bash
cat hosts | sed 's/https\?:\/\///' | gau > urls.txt
cat urls.txt | grep -P "\w+\.js(\?|$)" | sort -u > jsurls.txt
ffuf -mc 200 -w jsurls.txt:HFUZZ -u HFUZZ -replay-proxy http:127.0.0.1:8080
```

### Extract all javascript links from a domain using gau and grep
```bash
echo domain | gau | grep -Eo "https?://\S+?\.js" 
```

Bug-Bounty-Oneliners

Bug-Bounty-Oneliners Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Bug-Bounty-Oneliners

Bug-Bounty-Oneliners Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README