ault) will search ALL collections. If you don’t want to search Common Crawl at all, use the -xcc option. -t –timeout This is for archived responses only! How many seconds to wait for the server to send data before giving up (default: 30) -p –processes Basic multithreading is done when getting requests for a file of URLs. This argument determines the number of processes (threads) used (default: 3) -r –retries The number of retries for requests that get connection error or rate limited (default: 1). -v –verbose Verbose output -h –help show the help message and exit Input and ModeThe input -i can either be a domain only, e.g. redbull.com or a specific domain and path, e.g. redbull.com/robots.txt.

There are different modes that can be run for waymore. The -mode argument can be 3 different value:

* U – URLs will be retrieved from archive.org, commoncrawl.org (if -xcc is not passed) and otx.alienvault.com (if -xvv is not passed)
* R – Responses will be downloaded from archive.org
* B – Both URLs and Responses will be retrieved
If the input was a specific URL, e.g. redbull.com/robots.txt then the -mode defaults to R. Only responses will be downloaded. You cannot change the mode to U or B for a domain with path because it isn’t necessary to retrieve URLs for a specific URL.

If the input is just a domain, e.g. redbull.com then the -mode defaults to B. It can be changed to U or R if required. When a domain only is passed then all URLs/responses are retrieved for that domain (and sub domains unless -n is passed). If the no sub domain option -n is passed then the www sub domain is still included by default.
See Also: OSINT Tool: Pagodo config.ymlThe config.yml file have filter values that can be updated to suit your needs. These are all provided as comma separated lists:

* FILTER_CODE – Exclusions used to exclude responses we will try to get from web.archive.org, and also for file names when -i is a directory, e.g. 301,302
* FILTER_MIME – MIME Content-Type exclusions used to filter links and responses from web.archive.org through their API, e.g. ‘text/css,image/jpeg
* FILTER_URL – Response code exclusions we will use to filter links and responses from web.archive.org through their API, e.g. .css,.jpg
NOTE: The MIME types cannot be filtered for Alien Vault results because they do not return that in the API response. OutputIn the path of the waymore.py file, a results directory will be created. Within that, a directory will be created with target domain (or domain with path) passed with -i. When run, the following files are created in the target directory:
* waymore.txt – If -mode is U or B, this file will contain links from archive.org. Also any additional links from commoncrawl.org (if -xcc wasn’t passed) and otx.alienvault.com (if -xav wasn’t passed).
* index.txt – If -mode is R or B, and -url-filname was not passed then archived responses will be downloaded and hash values will be used for the saved file names. This file contains a comma separated list of <hash,<archive,<timestamp in case you need to know which URLs produced which response.
* *.xnl – These archived response files will be created if -mode was R or B. If -url-filename was passed the the file names will be the archive URL that generated the response, e.g. https–example.com-robots.txt.xnl, otherwise the file name will be a hash value, e.g. 7960113391501.xnl. Using hash values mean that less files will be written as there will only be one file per unique response. These archived responses are edited, before being saved, to remove any reference to web.archive.org. Info and SuggestionsThe number of links found, and then potentially the number of files archived responses you will download could potentially be HUGE for many domains. This tool isn’t about speed, it’s about finding more, so be patient.

There is a -p option to increase the number of processes (used when retrieving links from all sources, and downloading archived responses from archive.org). Howev[...]

GOOD RECON LEADS TO SENSSITIVE ACCOUNTS
https://medium.com/@milanjain7906/good-recon-leads-to-senssitive-accounts-a8abb6c21333?source=rss------bug_bounty-5

Hello people i have back with new hacking story !! . so yesterday i was hunting on one of the vdp program let’s consider it xyz.com . so…Continue reading on Medium » (https://medium.com/@milanjain7906/good-recon-leads-to-senssitive-accounts-a8abb6c21333?source=rss------bug_bounty-5)

Bypass Firewall and get the Real IP Address of a Website
https://www.reddit.com/r/Pentesting/comments/vzrdct/bypass_firewall_and_get_the_real_ip_address_of_a/

submitted by /u/Simple_Sand_7 (https://www.reddit.com/user/Simple_Sand_7)
[link] (https://youtube.com/watch?v=LVWEVynYjsY&feature=share) [comments] (https://www.reddit.com/r/Pentesting/comments/vzrdct/bypass_firewall_and_get_the_real_ip_address_of_a/)

How I Got My First CVE
https://medium.com/@tobydavenn/how-i-got-my-first-cve-a157606cc86e?source=rss------bug_bounty-5

Hello readers,Continue reading on Medium » (https://medium.com/@tobydavenn/how-i-got-my-first-cve-a157606cc86e?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Sandworm APT Trolls Researchers on Its Trail as It Targets Ukraine

Researchers who helped thwart the Russian nation-state group's recent attack on Ukraine's power supply will disclose at Black Hat USA what they found while reverse-engineering the powerful Industroyer2 malware used by the powerful hacking team.

Dark Reading: Attacks/Breaches
How Hackers Create Fake Personas for Social Engineering

And some ways to up your game for identifying fabricated online profiles of people who don't exist.

Hacking on Medium
How I Got My First CVE

https://cdn-images-1.medium.com/max/1337/0*klrX4fR1rpnINDhS.png
Hello readers,

Continue reading on Medium »

Hacking on Medium
Active Directory Attack Cheat Sheet

https://cdn-images-1.medium.com/max/612/1*FDWT4nZ2SOXt3z-ltaLHZA.jpeg
Do you struggle remembering the loads of different active directory attacks and enumeration vectors? Me too.. I’ll tell you a secret…

Continue reading on Medium »

Hacking on Medium
GOOD RECON LEADS TO SENSSITIVE ACCOUNTS

https://cdn-images-1.medium.com/max/700/1*RpebaYYBGxto8T13fyy05g.png
Hello people i have back with new hacking story !! . so yesterday i was hunting on one of the vdp program let’s consider it xyz.com . so…

Continue reading on Medium »

Hacking on Medium
The End of the Rope

https://cdn-images-1.medium.com/max/2600/0*Zn7-9vGkC8DXG0Ho
“I’m the one on the end of the rope,” Jimi complained. “None of you had the balls, remember.”

Continue reading on Medium »