🚨Subdominator - Unleash the Power of Subdomain Enumeration🚨
📢Subdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.
🔗Link- https://github.com/RevoltSecurities/Subdominator
📢Subdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.
🔗Link- https://github.com/RevoltSecurities/Subdominator
🔥6❤3👍3😁1
♨️One-liner to find sensitive PDF file♨️
for i in `cat apex-domains.txt | gau --subs --threads 16 | grep -Ea '\.pdf' | httpx -silent -mc 200`; do if curl -s "$i" | pdftotext -q - - | grep -Eaiq 'internal use|classified'; then echo $i; fi; done
❤21👍1
🚨Gourlex🚨
📢It is a simple tool that can be used to extract URLs and paths from web pages. It can be helpful during web application assessments to uncover additional targets.
🔗Link https://github.com/trap-bytes/gourlex
📢It is a simple tool that can be used to extract URLs and paths from web pages. It can be helpful during web application assessments to uncover additional targets.
🔗Link https://github.com/trap-bytes/gourlex
❤4👍4🗿1
shodan dorks for recon :
1. http://ssl.cert.subject.CN:"*.target.com" http.title:"index of/"
2. http://ssl.cert.subject.CN:"*.target.com" http.title:"gitlab"
3. http://ssl.cert.subject.CN:"*. http://target.com" http.title:"gitlab"
4. http://ssl.cert.subject.CN:"*.target.com" "230 login successful" port:"21"
5. http://ssl.cert.subject.CN:"*. http://target.com" +200 http.title:"Admin"
1. http://ssl.cert.subject.CN:"*.target.com" http.title:"index of/"
2. http://ssl.cert.subject.CN:"*.target.com" http.title:"gitlab"
3. http://ssl.cert.subject.CN:"*. http://target.com" http.title:"gitlab"
4. http://ssl.cert.subject.CN:"*.target.com" "230 login successful" port:"21"
5. http://ssl.cert.subject.CN:"*. http://target.com" +200 http.title:"Admin"
Target
Target : Expect More. Pay Less.
Shop Target online and in-store for everything from groceries and essentials to clothing and electronics. Choose contactless pickup or delivery today.
👍4🔥2❤1
🚨CVE-2024-34351:Next.js SSRF in Server Actions🚨
📢 Security researchers at Assetnote have identified a SSRF vulnerability in Next.js Server Actions. If the Host header is modified, and certain conditions are met, an attacker may be able to make requests that appear to be originating from the Next.js application server itself.
📝Dorks--->
Hunter:/product.name="Next.js"
FOFA:app="Next.js"
SHODAN:http.component:"Next.js"
🔗PoC: https://lnkd.in/gKbjiHVY
⚠Stay vigilant and take necessary precautions to protect your applications.
📢 Security researchers at Assetnote have identified a SSRF vulnerability in Next.js Server Actions. If the Host header is modified, and certain conditions are met, an attacker may be able to make requests that appear to be originating from the Next.js application server itself.
📝Dorks--->
Hunter:/product.name="Next.js"
FOFA:app="Next.js"
SHODAN:http.component:"Next.js"
🔗PoC: https://lnkd.in/gKbjiHVY
⚠Stay vigilant and take necessary precautions to protect your applications.
❤2🎄1
demo.gif
10.9 MB
🚨SQLMC - SQL Injection Massive Checker🚨
📢SQLMC (SQL Injection Massive Checker) is a tool designed to scan a domain for SQL injection vulnerabilities. It crawls the given URL up to a specified depth, checks each link for SQL injection vulnerabilities, and reports its findings.
🔗Download https://github.com/malvads/sqlmc
📢SQLMC (SQL Injection Massive Checker) is a tool designed to scan a domain for SQL injection vulnerabilities. It crawls the given URL up to a specified depth, checks each link for SQL injection vulnerabilities, and reports its findings.
🔗Download https://github.com/malvads/sqlmc
👍8