⚒️My Cyber Cheat Sheet
This is just a set here as a reminder of all of the tools and information just to have it in one place ordered correctly
Documentation
The Bug Hunter's Methodology (TBHM) also in video from NahamCon2022
Bug Bounty Programs
Gather scopes programatically with sw33tLie/bbscope
Tools
Subdomain Enumeration
Information Gathering
fetches securitytrails which is really usefull for subdomain-takeovers
Extract info from JS files: BishopFox/jsluice
function jsurls { jsluice urls <(curl -sk "$1"); }
checks certs
everything that is in a BB program should be here
Wordlists
Permutations
SQLi:
eslam3kl/SQLiDetector: Integrates with BurpSuite
Phishing
Other tools
DNS Resolver: puredns
DNS Resolver: dnsx
Reverse Lookup: https://securitytrails.com/domain/DOMAINTOFIND.COM/dns
Similar companies/domains by trademark: https://trademarks.justia.com/
Reverse Whois whoxyrm
De-dups: uro
Screenshot: gowitness
Test all the strings: CyberChef
403 Bruteforce: M4DM0e/DirDar
Check Acquisitions
Gives also context about web apps such as technology
Port Analysis
Content Discovery
https://github.com/epi052/feroxbuster
Other content discovery (better)
Gau: https://github.com/lc/gau
List public known resources
Waybackurls or waymore
VPS Hosting
Scaleway - Budget Friendly
Oracle Cloud - Almost free decent VPS
Google Cloud - 300$ in free credits
Amazon Web Services - Pretty decent VPS free tier
Azure - Same as AWS
Manual - Proxies
Get hands on training with the Web Security Academy from PortSwigger
Static Code Analysis | Secret detection
Privilege Escalation
Useful banners
Good WriteUp's / Posts:
Last updated