filesoft.ir
1 subscriber
1 photo
1 file
5 links
Download Telegram
Channel created
سلام
فروش ویژه آنتی ویروس اورجینال نود 32 دو کاربره یک ساله
یک نسخه دوکاربره برای کامپیوتر و یک نسخه دو کاربره برای اندروید
multi device security nod 32
فقط 15000 تومان
filesoft.ir
Channel name was changed to «filesoft.ir»
آموزش فعال سازی نود ۳۲

http://bit.ly/2zZEarF
Channel photo updated
آموزش بوت استرپ به زبان فارسی (قسمت اول)
https://bit.ly/2AXCwao
45 - درباره بایپس html encode در تست xss توضیح بده که چکار کنیم؟
800-walmart.com  2018-06-29  GODADDY.COM, LLC
b2bwalmartca.com 2007-10-19 NAMECHEAP INC.
black-friday--walmart.com 2017-04-24 TUCOWS DOMAINS INC.
black-friday--walmart.com 2017-04-24 TUCOWS DOMAINS INC.
black-friday-ultra4k-walmart.com 2017-10-23 TUCOWS DOMAINS INC.
blackfriday--ultrahd-walmart.com 2017-10-25 TUCOWS DOMAINS INC.
blackfriday-tv--walmart.com 2017-10-06 NAME.COM, INC.
blackfriday-tv4k-walmart.com 2017-09-14 1 API GMBH
blackfriday-tvultrahd-4k-walmart.com 2017-10-23 TUCOWS DOMAINS INC.
blackfriday-ultra4k-walmart.com 2017-09-28 TUCOWS DOMAINS INC.
blackfriday-ultra4k-walmart.com 2017-09-28 TUCOWS DOMAINS INC.
blackfriday-walmart.com 2017-08-30 1 API GMBH
blackfriday-walmart.com 2018-11-21 TUCOWS DOMAINS INC.
blackfriday-walmart.com 2020-02-29 TUCOWS DOMAINS INC.
blackfriday-walmart.com 2020-02-29 TUCOWS DOMAINS INC.
blackweek-walmart.com 2018-11-26 TUCOWS DOMAINS INC.
bluflair.com 2012-07-09 MARKMONITOR INC.
bp2.in 2016-02-19 GODADDY.COM, LLC (R101-AFIN)
br-walmart.com 2018-06-26 AMAZON REGISTRAR, INC.
br-walmart.com 2019-04-28 AMAZON REGISTRAR, INC.
brandassesor-walmart.com 2018-07-16 GODADDY.COM, LLC
capitalone-walmart.com 2020-01-31 GODADDY.COM, LLC
capitalone-walmart.com 2020-03-17 GODADDY.COM, LLC
carhco.com 2010-01-24 NAMECHEAP INC.
carhco.net 2001-11-09 REGISTER.COM, INC.
china-walmart.com 2020-01-30 TUCOWS DOMAINS INC.
classroomsbywalmart.com 2012-11-14 MARKMONITOR INC.
clube-dos-descontos-walmart.com 2019-02-22 AMAZON REGISTRAR, INC.
clubewalmart.com.br
clubwalmart.com.br
com-walmart.com 2019-01-31 TUCOWS DOMAINS INC.
corporate-walmart.com 2019-01-31 TUCOWS DOMAINS INC.
coupons-walmart.com 2020-01-30 TUCOWS DOMAINS INC.
despensafamiliar.com 1999-09-01 NETWORK SOLUTIONS, LLC.
developyou.com.br
edlp.us 2011-05-26 MARKMONITOR, INC.
emailsoe.org.uk 2015-12-16 123-REG LIMITED T/A 123-REG [TAG = 123-REG]
enforcement-walmart.com 2019-11-05 GODADDY.COM, LLC
especial-walmart.com 2018-11-07 GODADDY.COM, LLC
fetisoff.com 2008-01-11 GODADDY.COM, LLC
friday--tv--walmart.com 2017-08-21 TUCOWS DOMAINS INC.
gecwalmart.com 2011-05-26 MARKMONITOR INC.
getontheshelf.com 2011-09-19 MARKMONITOR INC.
goodies.co 2010-07-20 MARKMONITOR, INC.
google-com-win-a-free-gift-from-iphone-amazon-walmart.com 2020-02-08 DYNADOT12 LLC
groceries-walmart.com 2020-03-13 GODADDY.COM, LLC
harttoolsets-walmart.com 2021-05-10 DYNADOT, LLC
healthybenefitsplus-walmart.com 2020-10-09 GODADDY.COM, LLC
hipermas.biz 2003-05-07 REGISTER.COM
hipermas.com 1999-05-27 REGISTER.COM, INC.
hipermas.net 2003-05-07 REGISTER.COM, INC.
hiperpaiz.com 1999-09-01 NETWORK SOLUTIONS, LLC.
hiring-walmart.com 2018-04-16 GODADDY.COM, LLC
husbandfamily.net 2008-09-01 TUCOWS DOMAINS INC.
i-walmart.com 2019-05-31 TUCOWS DOMAINS INC.
i-walmart.com 2019-05-31 TUCOWS DOMAINS INC.
in-home-walmart.com 2019-09-12 GODADDY.COM, LLC
jobs-walmart.com 2019-03-31 TUCOWS DOMAINS INC.
kosmix.com 2005-05-26 MARKMONITOR INC.
lafragua.com 1998-04-30 NETWORK SOLUTIONS, LLC.
m-walmart.com 2018-09-30 TUCOWS DOMAINS INC.
m-walmart.com 2018-09-30 TUCOWS DOMAINS INC.
marketplace-apply-walmart.com 2020-10-16 GODADDY.COM, LLC
masxmenos.biz 2003-05-07 REGISTER.COM
maxibodega.com 2003-11-03 REGISTER.COM, INC.
megapromo-tv4k-ultrahd-walmart.com 2017-09-21 1 API GMBH
mercadorama.com.br
miami-walmart.com 2017-06-26 GODADDY.COM, LLC
miclubco.com 2009-06-04 NETWORK SOLUTIONS, LLC.
miclubco.info 2016-05-16 NETWORK SOLUTIONS, LLC
miclubco.net 2009-06-04 NETWORK SOLUTIONS, LLC.
misuper.com.ec 1999-09-01 NIC.EC REGISTRAR MISUPER.COM,"NETWORK SOLUTIONS, LLC.
notifications-walmart.com 2018-02-07 GODADDY.COM, LLC
oferta-walmart.com 2018-06-05 GODADDY.COM, LLC
ofertasespeciais-walmart.com 2018-11-30 TUCOWS DOMAINS INC.
ofertasespeciais-walmart.com 2018-11-30 TUCOWS DOMAINS INC.
one-walmart.com 2019-03-29 GODADDY.COM, LLC
online-walmart.com 2021-08-19 GODADDY.COM, LLC
orders-walmart.com 2016-06-21 GODADDY.COM, LLC

paizenlinea.com 1997-10-23 NETWORK SOLUTIONS, LLC.
paizexpress.com 2000-06-02 NETWORK SOLUTIONS, LLC.
pay-walmart.com 2018-05-31 TUCOWS DOMAINS INC.
payment-walmart.com 2017-11-06 TUCOWS DOMAINS INC.
payment-walmart.com 2017-11-06 TUCOWS DOMAINS INC.
pinnacle-walmart.com 2021-02-04 GODADDY.COM, LLC
porlagentewm.com 2015-03-09 GODADDY.COM, LLC
produltos-walmart.com 2018-11-05 NETREGISTRY PTY. LTD.
promo-ultra4k-walmart.com 2017-08-29 TUCOWS DOMAINS INC.
promocao--walmart.com 2017-04-11 TUCOWS DOMAINS INC.
promocao--walmart.com 2019-01-08 TUCOWS DOMAINS INC.
promocao-tv--walmart.com 2018-09-12 TUCOWS DOMAINS INC.
promocao-tv--walmart.com 2018-09-12 TUCOWS DOMAINS INC.
promocao-tvultrahd-walmart.com 2017-09-03 TUCOWS DOMAINS INC.
promocs--walmart.com 2018-10-16 TUCOWS DOMAINS INC.
promocs--walmart.com 2018-10-16 TUCOWS DOMAINS INC.
promos--walmart.com 2018-10-20 TUCOWS DOMAINS INC.
razorshoptoysbybrand-walmart.com 2021-07-15 DYNADOT, LLC
registry-walmart.com 2020-12-04 GODADDY.COM, LLC
retaillink-walmart.com 2019-09-03 GODADDY.COM, LLC
retaillink2-walmart.com 2020-03-04 GODADDY.COM, LLC
rockingacnt.com 2018-03-01 FASTDOMAIN, INC.
saldao-tv4k-walmart.com 2017-10-25 TUCOWS DOMAINS INC.
screw-with-walmart.com 2018-09-29 GODADDY.COM, LLC
securewallties.co.uk 2014-11-28 HEART INTERNET LTD T/A HEART INTERNET [TAG = HEARTINTERNET]
seiyu-saiyo.com 2017-05-12 JAPAN REGISTRY SERVICES CO., LTD.
seiyu-survey.com 2020-01-10 JAPAN REGISTRY SERVICES CO., LTD.
seiyu.com 2003-01-24 JAPAN REGISTRY SERVICES CO., LTD.
seller-walmart.com 2018-06-04 GODADDY.COM, LLC
shopycat.com 2011-06-09 MARKMONITOR INC.
shopyfeed.com 2012-05-08 MARKMONITOR INC.
smallsociety.com 2005-03-07 MARKMONITOR INC.
socialcalendar.com 1998-08-14 MARKMONITOR INC.
sparkfeeds.com 2012-05-08 MARKMONITOR INC.
storejobs-walmart.com 2021-08-03 GODADDY.COM, LLC
super-promo-tv-walmart.com 2017-08-17 TUCOWS DOMAINS INC.
swatchedit.com 2015-06-01 GODADDY.COM, LLC
t-v-black-friday--walmart.com 2017-12-20 TUCOWS DOMAINS INC.
t-v-black-friday-walmart.com 2017-12-20 TUCOWS DOMAINS INC.
t-v-black-friday-walmart.com 2017-12-20 TUCOWS DOMAINS INC.
the-seiyu.com 2000-03-22 JAPAN REGISTRY SERVICES CO., LTD.
tv-black-friday-walmart.com 2017-11-22 TUCOWS DOMAINS INC.
tv-black-friday-walmart.com 2017-11-22 TUCOWS DOMAINS INC.
tv-ultrahd-4k-walmart.com 2017-09-06 1 API GMBH
tv-ultrahd4k-walmart.com 2017-09-28 1 API GMBH
tv4k-ultrahd--walmart.com 2017-10-24 TUCOWS DOMAINS INC.
tv4k-ultrahd-black-friday-walmart.com 2017-10-09 TUCOWS DOMAINS INC.
tvultrahd-4k--walmart.com 2017-10-23 TUCOWS DOMAINS INC.
ultra-smart-walmart.com 2017-09-19 KEY-SYSTEMS GMBH
ultra-tv-walmart.com 2017-04-11 TUCOWS DOMAINS INC.
ultra4k-walmart.com 2017-05-17 TUCOWS DOMAINS INC.
ultrahd-tv-walmart.com 2017-05-02 TUCOWS DOMAINS INC.
ultrahd-tv4k-walmart.com 2017-09-19 URL SOLUTIONS INC.
v--blackfriday--walmart.com 2017-12-09 TUCOWS DOMAINS INC.
v--blackfriday--walmart.com 2017-12-09 TUCOWS DOMAINS INC.
v--blackfriday--walmart.com 2021-02-01 DYNADOT, LLC
vitamins-walmart.com 2020-08-03 GODADDY.COM, LLC
w-mt.us 2011-05-26 MARKMONITOR, INC.
w-walmart.com 2018-02-28 TUCOWS DOMAINS INC.
wal-mart.com.br
walcen.net 2006-05-22 REGISTER.COM, INC.
walmart-centroamerica.com 2006-03-09 NAMECHEAP INC.
walmart-styleguide.com 2008-06-18 TUCOWS DOMAINS INC.
walmartcam.com 2011-04-04 NAMECHEAP INC.
walmartcentroamerica.com 2006-03-09 NAMECHEAP INC.
walmartcentroamerica.net 2006-03-09 ENOM, INC.
walmartcentroamerica.org 2006-03-09 ENOM, INC.
walmartcr.com 2011-04-04 NAMECHEAP INC.
walmartdecentroamerica.com 2011-04-04 NAMECHEAP INC.
walmartdirect.com 2003-03-26 DOMAIN.COM, LLC
walmartdvd.com 2002-04-19 MARKMONITOR INC.
walmartentrevistadesalida.com 2016-03-08 GODADDY.COM, LLC
walmartgt.com 2011-04-04 NAMECHEAP INC.
walmarthn.com 2011-04-04 NAMECHEAP INC.
walmartlabs.com 2010-08-26 MARKMONITOR INC.
walmartmobile.cn 2015-03-19
walmartmobileapp-walmart.com 2021-05-08 DYNADOT, LLC

walmartmuseumstore.com 2016-03-19 GODADDY.COM, LLC
walmartone.com 2011-09-16 MARKMONITOR INC.
walmartpl.us 2020-02-24 GODADDY.COM, INC.
walmartrecarga.com.br
walmartsv.com 2011-04-04 NAMECHEAP INC.
wlmt.mobi 2011-05-26 MARKMONITOR INC.
wlmt.us 2011-05-26 MARKMONITOR, INC.
wmobjects.com.br
wmrets.com 2017-06-22 GOOGLE INC.
wmsites.com.br
wmt.cc 2011-05-26 MARKMONITOR INC.
zptransformation.com 2016-11-14 ENOM, INC.
Forwarded from Bug Bounty tips
Bug Bounty Platforms
Forwarded from Bug Bounty tips
top_application_programming_interface_directories.txt
399.5 KB
#api #wordlist

Раньше мы выполняли брутфорс только для статических файлов и папок. Но в современных реалиях, мы всё больше встречаем приложения, которые работают посредством конечных точек API. Это означает, что подход должен меняться, давайте рассмотрим специфику.

Возьмём, в качестве примера, запрос на удаление аккаунта пользователя:

DELETE /api/v1/users/<int> HTTP/2
Host: example.com
Content-Type: application/xml

HTTP/2 200 OK
Connection: close

1. Для того чтобы обнаружить эту конечную точку, в словаре должны быть сущности : api, v1, users
2. Вам нужно в запросе использовать метод DELETE
3. Поставить верный Content-Type
4. В последнем пути — нужно добавить число.

В противном случае ответ будет: 404 Not Found

Из этого следует, что нужен хороший словарь, специфичный для API, а также ротация методов GET, POST, DELETE, etc.

При брутфорсе нас интересуют следующие поля (%s):

%s /api/v1/%s/<int> HTTP/2
Host: example.com
Content-Type: %s


Поскольку обычные словари не нацелены на API спецификацию, я собрал свой. Для этого использовал замечательный массив данных от Assetnote из 67 500 файлов Swagger, собранных с помощью Google BigQuery.

Нарезал сущности и отфильтровал их по популярности — файл прикреплён к посту.