intitle:"index of" inurl:"/js/" ("config.js" | "credentials.js" | "secrets.js" | "keys.js" | "password.js" | "api_keys.js" | "auth_tokens.js" | "access_tokens.js" | "sessions.js" | "authorization.js" | "encryption.js" | "certificates.js" | "ssl_keys.js" | "passphrases.js" | "policies.js" | "permissions.js" | "privileges.js" | "hashes.js" | "salts.js" | "nonces.js" | "signatures.js" | "digests.js" | "tokens.js" | "cookies.js" | "topsecr3tdonotlook.js")

ffuf -u http://target.com/FUZZ -w wordlist.txt -e .json,.xml,.bak,.sql,.zip,.log,.config,.env -c -t 50 -recursion -recursion-depth 2 -s -mc 200,301,302 -o results.json

What does the command do?

dirsearch -l urls.txt -e
conf,config,bak,backup,swp,old,db,sql,asp,aspx,aspx
~,asp~,py,py~,rb,rb~,php,php~,bak,bkp,cache,cgi,con
f,csv,html,inc,jar,js,json,jsp,jsp~,lock,log,rar,ol
d,sql,sql.gz,sql.zip,sql.tar.gz,sql~,swp,swp~,tar,t
ar.bz2,tar.gz,txt,wadl,zip,log,xml,js,json --deep-
recursive --force-recursive --exclude-sizes=0B --
random-agent --full-url -o output.txt

A simple CSRF bypass to check if your target is sending JSON data without an anti-CSRF token

POST /api/profile HTTP/2
Host: app.example.com
Cookie: sess=eyJ...  # Session Cookie
Content-Type: application/json

{
  "email": "test@example.com"
}

POST /api/profile HTTP/2
Host: app.example.com
Cookie: sess=eyJ...  # Session Cookie
Content-Type: text/plain

{
  "email": "test@example.com"
}

sqlmap -u ' target.com ' --data '{"User":"abcdefg","Pwd":"Abc@123"}' --random-agent --ignore-code=403 --dbs --hex

subfinder -d canva.com | httpx -favicon -j | jq -r .favicon | grep -v null | sort-u

Here are 10 Google Dorks that are new and useful for bug bounty hunters during reconnaissance:

inurl:settings filetype:json OR filetype:xml

intitle:index.of "backup" OR "bkp" OR "bak"

inurl:error.log OR inurl:debug.log filetype:log

inurl:dbconfig OR inurl:database filetype:ini OR filetype:env

inurl:api OR inurl:swagger filetype:json

intitle:index.of id_rsa OR id_dsa filetype:key

intext:"password=" OR "pwd=" OR "pass=" filetype:properties OR filetype:txt

site:example.com filetype:pdf OR filetype:xls "confidential"

inurl:exports OR inurl:downloads filetype:csv OR filetype:txt

intext:"cloud" OR "aws" OR "gcp" filetype:yml OR filetype:yaml

ffuf -w /path/to/wordlist.txt -u https://example.com/FUZZ -H "Custom-Header: value"

ffuf -w /path/to/wordlist.txt -u https://example.com/FUZZ -recursion -recursion-depth 2

ffuf -w /path/to/wordlist.txt -u https://example.com/FUZZ -mr "regex-pattern"