SecurityOnline: subfinder v2.6.2 releases: subdomain discovery tool https://securityonline.info/subfinder/ #WebInformationGathering #SubFinder

SecurityOnline: subfinder v2.6.1 releases: subdomain discovery tool https://securityonline.info/subfinder/ #WebInformationGathering #SubFinder

Simple Script for Finding Cross
Site Scripting (XSS) vulns

#!/bin/bash

subfinder -d $1 -o domains_subfinder_$1
amass enum --passive -d $1 -o domains_$1

cat domains_subfinder_$1 | tee -a domain_$1
cat domains_$1 | filter-resolved | tee -a domains_$1.txt

cat domains_$1.txt | httprobe -p http:81 -p http:8080 -p https:8443 | waybackurls | kxss | tee xss.txt

https://github.com/projectdiscovery/subfinder
https://github.com/OWASP/Amass
https://github.com/tomnomnom/hacks/tree/master/filter-resolved
https://github.com/tomnomnom/httprobe
https://github.com/tomnomnom/waybackurls
https://github.com/tomnomnom/hacks/tree/master/kxss

#bugbounty #bugbountytips #xss #subfinder #httprobe #waybackurls #kxss #amass

Hunting for *interesting* domains

subfinder -d site.com -all | dnsprobe -silent | cut -d ' ' -f1 | grep --color 'dmz\|api\|staging\|env\|v1\|stag\|prod\|dev\|stg\|test\|demo\|pre\|admin\|beta\|vpn\|cdn\|coll\|sandbox\|qa\|intra\|extra\|s3\|external\|back'

https://github.com/projectdiscovery/subfinder
https://github.com/projectdiscovery/dnsprobe

#bugbounty #bugbountytips #subfinder #dnsprobe

SQL Injection Hunting

subfinder -d site.com -all -silent | waybackurls | sort -u | gf sqli > gf_sqli.txt; sqlmap -m gf_sqli.txt --batch --risk 3 --random-agent | tee -a sqli.txt

https://github.com/projectdiscovery/subfinder
https://github.com/1ndianl33t/Gf-Patterns
https://github.com/tomnomnom/waybackurls

#bugbounty #bugbountytips #subfinder #sqlinjection #waybackurls #sqli

Scanning for CISA Top exploited vulnerabilities

subfinder -d site.com -all -silent | httpx -silent | nuclei -rl 50 -c 15 -timeout 10 -tags cisa -vv

https://github.com/projectdiscovery/subfinder
https://github.com/projectdiscovery/httpx
https://github.com/projectdiscovery/nuclei
https://github.com/projectdiscovery/nuclei-templates
#bugbounty #bugbountytips #subfinder #nuclei #httpx #cisa