Posts

Subfinder -> HTTP Probe -> wayback/gau -> GF patterns -> Valid URL's -> Hunting

1-Subfinder- go get -u -v github.com/projectdiscovery/subfinder/cmd/subfinder Single Domain's output-  subfinder -d domain.txt -o output.txt Multiple Domain's output- subfinder -dL domains.txt -oD output 2-HTTP Probe- go get -u github.com/tomnomnom/httprobe type domain_output.txt | httprobe -p http:80 -p htpps:443 -p https:8443  -c 50  -t 20000 >httprobe_output.txt Prefer HTTPS- Sometimes you don't care about checking HTTP if HTTPS is working. You can do that with the --prefer-https flag: tyoe domains.txt | httprobe --prefer-https 3-Waybackurls- go get github.com/tomnomnom/waybackurls type  httprobe_output.txt  | waybackurls >wayback_url_httprobe.txt 4-Install GF (Use XSS, SSRF, Redirect..etc patterns)- https://github.com/tomnomnom/gf cat wayback_url_httprobe.txt | gf xss | tee gf_xss.txt cat gf_xss.txt | parallel -j 10 curl --proxy "http://127.0.0.1:8080" -sk > /dev/null 5-Find interesting URL's with vulnerable parameters and start Hunting. Happy Hun...

FIX: "VT-x is not available" error in VirtualBox

To FIX: "VT-x is not available" error in VirtualBox Follow the below Steps- Disable Hyper-V. * (This step applies only to Windows 10 Professional and Enterprise versions.) 1. Navigate to Windows Control Panel and open Programs and Features. 2. Click Turn Windows features on or off. 3. Uncheck the Hyper-V feature and click OK. * * Note: If the Hyper-V is not enabled, then try the following trick: Enable Hyper-V –> Restart the computer –> Disable Hyper-V and restart again. 4. When the removal operation is completed, restart your computer. 5. After restart, open Command Prompt as Administrator. 6. Type the following command and press Enter: bcdedit /set hypervisorlaunchtype off 7. Reboot your PC. 8. After reboot, start the VM. 9. Done