Discover and read the best of Twitter Threads about #attacksurfacemanagement
Most recents (2)
6 easy steps to master httpx. A thread 👇🧵
httpx (from @pdiscoveryio) is a fast and multi-purpose HTTP toolkit. Let's find out how it works
👇
#recon #httpx #bugbountytips #bugbounty #AttackSurfaceManagement #recontips
httpx (from @pdiscoveryio) is a fast and multi-purpose HTTP toolkit. Let's find out how it works
👇
#recon #httpx #bugbountytips #bugbounty #AttackSurfaceManagement #recontips
1/6 Standard use
httpx can be used with a target list or piped with other tools:
$ httpx -list subdomains.txt
$ subfinder -d ups. com | httpx -silent
$ httpx -l subs.txt -ports 8080 -threads 100
httpx can be used with a target list or piped with other tools:
$ httpx -list subdomains.txt
$ subfinder -d ups. com | httpx -silent
$ httpx -l subs.txt -ports 8080 -threads 100
2/6 Specific Path or file:
It's possible to request a specific file or path useful for searching misconfiguration on multiple targets:
$ httpx -l subs.txt -silent -path “/.git/” -fr -mc 200
It's possible to request a specific file or path useful for searching misconfiguration on multiple targets:
$ httpx -l subs.txt -silent -path “/.git/” -fr -mc 200
Subdomain Enumeration is a critical phase in the BugBounty game
Subfinder (from @pdiscoveryio) is one of the best tool for subdomain enumeration
Here are 6 steps to master this great tool 👇🧵
#recontips #bugbountytips #bugbounty #pentesting #AttackSurfaceManagement
Subfinder (from @pdiscoveryio) is one of the best tool for subdomain enumeration
Here are 6 steps to master this great tool 👇🧵
#recontips #bugbountytips #bugbounty #pentesting #AttackSurfaceManagement
1/6 Subdomain Enumeration
$ subfinder -d ups. com
$ subfinder -d ups .com -all -config config.yaml
$ subfinder -dL listOfDomains.txt -all
$ subfinder -d ups. com
$ subfinder -d ups .com -all -config config.yaml
$ subfinder -dL listOfDomains.txt -all
2/6 Sources
You can display, exclude or selecting the sources
$ subfinder -d ups. com -collect-sources
$ subfinder -d ups. com -exclude-sources crtsh,alienvault
$ subfinder -d ups. com -sources crtsh
$ subfinder -ls
You can display, exclude or selecting the sources
$ subfinder -d ups. com -collect-sources
$ subfinder -d ups. com -exclude-sources crtsh,alienvault
$ subfinder -d ups. com -sources crtsh
$ subfinder -ls
