Skip to content

Commit c4fed0a

Browse files
s0cm0nkeygitbook-bot
authored andcommitted
GitBook: [#1202] No subject
1 parent 8e8ecaa commit c4fed0a

2 files changed

Lines changed: 43 additions & 41 deletions

File tree

‎cyber-intelligence/osint/files-media-breach-paste-code.md‎

Lines changed: 42 additions & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ Documents.html is a tool that allows you to take a search term related to your t
1111
{% file src="../../.gitbook/assets/Documents (1).html" %}
1212

1313
* [Google Custom Search Engine for Documents](https://cse.google.com/cse?cx=001580308195336108602:vvchyaurf\_4#gsc.tab=0)
14-
* [http://www.uvrx.com/](http://www.uvrx.com) - The most comprehensive online file storage search engine. They have individual search engines for badongo, Mediafire, Zshare, 4shared and taringa. They also provide a search all function that searches filefactory, depositfiles, easy-share, sharedzilla, sendspace, yousendit, letitbit, drop, sharebee, rapidspread, and many others.
14+
* [http://www.uvrx.com/](http://www.uvrx.com/) - The most comprehensive online file storage search engine. They have individual search engines for badongo, Mediafire, Zshare, 4shared and taringa. They also provide a search all function that searches filefactory, depositfiles, easy-share, sharedzilla, sendspace, yousendit, letitbit, drop, sharebee, rapidspread, and many others.
1515
* [PowerMeta](https://github.com/dafthack/PowerMeta) - PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.
1616
* [goofile](https://www.kali.org/tools/goofile/) - Use this tool to search for a specific file type in a given domain.
1717
* [FilePhish](https://cartographia.github.io/FilePhish/) - A simple OSINT Google query builder for fast and easy document and file discovery.
@@ -21,22 +21,22 @@ Documents.html is a tool that allows you to take a search term related to your t
2121

2222
* [http://palined.com/search/](http://palined.com/search/) - Search for files and open directories via keyword. Uses a Google CSE.
2323
* [https://www.filechef.com](https://www.filechef.com) - Search for open directories and files on the web or in Google Drives via keywords. Including document, video, audio, image and executable files. Uses Google dorks.
24-
* [Napalm FTP Indexer](https://www.searchftps.net) - Search for documents in public FTP servers
25-
* [MMNT](https://www.mmnt.ru) - Russian FTP indexer
26-
* [GreyhatWarfare Public AWS Buckets](https://buckets.grayhatwarfare.com) - Search for publically acessible AWS S3 buckets.
27-
* [MS Azure Portal](https://ms.portal.azure.com) - Search for public blobs
24+
* [Napalm FTP Indexer](https://www.searchftps.net/) - Search for documents in public FTP servers
25+
* [MMNT](https://www.mmnt.ru/) - Russian FTP indexer
26+
* [GreyhatWarfare Public AWS Buckets](https://buckets.grayhatwarfare.com/) - Search for publically acessible AWS S3 buckets.
27+
* [MS Azure Portal](https://ms.portal.azure.com/) - Search for public blobs
2828
* [https://osint.sh/buckets/](https://osint.sh/buckets/) - Find public AWS and Azure buckets and documents via keyword.
29-
* [https://www.gdrivesearch.com/](https://www.gdrivesearch.com) - A simple and fast tool that allows you to search Google Drive for files.
29+
* [https://www.gdrivesearch.com/](https://www.gdrivesearch.com/) - A simple and fast tool that allows you to search Google Drive for files.
3030
* [https://www.reddit.com/r/opendirectories/](https://www.reddit.com/r/opendirectories/) - Unprotected directories of pics, vids, music, software and otherwise interesting files.
3131

3232
### Article, Presentation, and Book search
3333

34-
* [https://libgen.rs/](https://libgen.rs) - This is the largest free library in human history. Giving the world free access to over 84 million scholarly journals, over 6.6 million academic and general-interest books, over 2.2 million comics, and over 381 thousand magazines. Commonly referred to as "Libgen" for short. Libgen has zero regard for copyright.
35-
* [https://sci-hub.se/](https://sci-hub.se) - A "shadow library" that provides free access to millions of research papers and books by bypassing paywalls. SciHub has zero regard for copyright.
34+
* [https://libgen.rs/](https://libgen.rs/) - This is the largest free library in human history. Giving the world free access to over 84 million scholarly journals, over 6.6 million academic and general-interest books, over 2.2 million comics, and over 381 thousand magazines. Commonly referred to as "Libgen" for short. Libgen has zero regard for copyright.
35+
* [https://sci-hub.se/](https://sci-hub.se/) - A "shadow library" that provides free access to millions of research papers and books by bypassing paywalls. SciHub has zero regard for copyright.
3636
* [https://the-eye.eu/public](https://the-eye.eu/public) - An open directory data archive dedicated to the long-term preservation of any and all data including websites, books, games, software, video, audio, other digital-obscura and ideas. Currently hosts over 140TB of data for free.
3737
* [https://eyedex.org](https://eyedex.org) - A searchable index of the-eye.eu. Much faster than manually digging through subfolders or using Google dorks.
3838
* [https://doaj.org](https://doaj.org) - Search over 16,000 journals, over 6.5 million articles in 80 different languages from 129 different countries.
39-
* [https://www.slideshare.net/](https://www.slideshare.net) - Allows users to upload content including presentations, infographics, documents, and videos. Users can upload files privately or publicly in PowerPoint, Word, PDF, or OpenDocument format
39+
* [https://www.slideshare.net/](https://www.slideshare.net/) - Allows users to upload content including presentations, infographics, documents, and videos. Users can upload files privately or publicly in PowerPoint, Word, PDF, or OpenDocument format
4040
* [https://slideshare-downloader.herokuapp.com](https://slideshare-downloader.herokuapp.com) - Enter the URL of any Slideshare document and this tool will download it for you.
4141

4242
​
@@ -54,31 +54,32 @@ While having other functionality Michael Bazzell's **Images.html** and **Videos.
5454
{% file src="../../.gitbook/assets/Videos (1).html" %}
5555

5656
* [CameraTrace](http://www.cameratrace.com/trace) - Trace the location a camera has been by the metadata it embeds in photos that end up on the internet.
57-
* [FotoForensics](https://fotoforensics.com) - Free and public photo forensics tools.
58-
* [https://www.imageforensic.org/](https://www.imageforensic.org) - Image Metadata Analysis tool
57+
* [FotoForensics](https://fotoforensics.com/) - Free and public photo forensics tools.
58+
* [https://www.imageforensic.org/](https://www.imageforensic.org/) - Image Metadata Analysis tool
5959
* [https://github.com/GuidoBartoli/sherloq](https://github.com/GuidoBartoli/sherloq) - An open-source digital image forensic toolset
60-
* [https://www.peteyvid.com/](https://www.peteyvid.com) - A video and audio search engine that searches over 70 different platforms.
60+
* [https://www.peteyvid.com/](https://www.peteyvid.com/) - A video and audio search engine that searches over 70 different platforms.
6161
* Reverse Image Search
62-
* [The Wolfram Language Image Identification Project](https://www.imageidentify.com) 
63-
* [pic.sogou.com](https://pic.sogou.com) — chinese reverse image search engine
64-
* [Image So Search](https://image.so.com) — Qihoo 360 Reverse Images Search
62+
* [The Wolfram Language Image Identification Project](https://www.imageidentify.com/) 
63+
* [pic.sogou.com](https://pic.sogou.com/) — chinese reverse image search engine
64+
* [Image So Search](https://image.so.com/) — Qihoo 360 Reverse Images Search
6565
* [Revesearch.com](https://revesesearch.com) — allows to upload an image once and immediately search for it in #Google, #Yandex, and #Bing.
6666
* [Pixsy](https://pixsy.com) — allows to upload pictures from computer, social networks or cloud storages, and then search for their duplicates and check if they are copyrighted
6767
* [Image Search Assistant](https://chrome.google.com/webstore/detail/image-search-assistant/kldhhobmmejaeaiilomaibhjlcfpceac/related) — searches for a picture, screenshot or fragment of a screenshot in several search engines and stores at once
6868
* [openi.nlm.nih.gov](https://openi.nlm.nih.gov/gridquery) — Reverse image search engine for scientific and medical images
6969
* [DepositPhotos Reverse Image Search](https://ru.depositphotos.com/search/by-images.html) — tool for reverse image search (strictly from DepositPhoto's collection of 222 million files).
70-
* [EveryPixel](https://www.everypixel.com) — Reverse image search engine. Search across 50 leading stock images agencies. It's possible to filter only free or only paid images.
70+
* [EveryPixel](https://www.everypixel.com/) — Reverse image search engine. Search across 50 leading stock images agencies. It's possible to filter only free or only paid images.
71+
* [https://tineye.com/](https://tineye.com/) - Image search engine.
7172
* Facial Recognition
72-
* [pictriev](http://pictriev.com) - Search engine for faces. Upload the picture of choice and find links to other pictures with similar people.
73+
* [pictriev](http://pictriev.com/) - Search engine for faces. Upload the picture of choice and find links to other pictures with similar people.
7374
* [PimEyes](https://pimeyes.com/en) - Facial recognition and reverse image search
7475
* [Portrait Matcher](http://zeus.robots.ox.ac.uk/portraitmatcher/index?error=agree) — Upload a picture of a face and get three paintings that show similar people.
75-
* [FindFace](https://findface.pro) - Russian face search engine.
76+
* [FindFace](https://findface.pro/) - Russian face search engine.
7677
* [Face Recognition](https://github.com/ageitgey/face\_recognition) — facial recognition api for Python and the command line
77-
* [Search4faces.com](https://search4faces.com) — search people in VK, Odnoklassniki, TikTok and ClubHouse by photo or identikit
78+
* [Search4faces.com](https://search4faces.com/) — search people in VK, Odnoklassniki, TikTok and ClubHouse by photo or identikit
7879
* Clothing/Shopping
79-
* [Searchbyimage.app](https://searchbyimage.app) — search clothes in online shops
80+
* [Searchbyimage.app](https://searchbyimage.app/) — search clothes in online shops
8081
* [Aliseeks.com](https://www.aliseeks.com/search) — search items by photo in AliExpress and Ebay
81-
* [lykdat.com](https://lykdat.com) — clothing reverse image search services
82+
* [lykdat.com](https://lykdat.com/) — clothing reverse image search services
8283

8384
## **Breach/Leak/Paste data** 
8485

@@ -88,22 +89,22 @@ The below tools and links can be used to parse data in known data breaches and l
8889
\
8990
Paste sites like Pastebin have recently changed their ability to be parsed. Pastebin itself has removed the ability to to search its pastes. However, with a bit of clever google dorking, you can still search for breach data by submitting your search along with "insite:pastebin.com"
9091

91-
* [https://www.dehashed.com/](https://www.dehashed.com) - Premium but well worth it, Breach data site. Can search by multiple types of indicators like email, IP, address, domain, even password.
92-
* [Have I Been Pwned](https://haveibeenpwned.com) - Check if your email has been compromised in a data breach 
93-
* [Scylla](https://scylla.so) - One of the greatest breach parsing tools available.
94-
* [https://leak-lookup.com/](https://leak-lookup.com) - Leak-Lookup allows you to search across thousands of data breaches to stay on top of credentials that may have been compromised, allowing you to proactively stay on top of the latest data leaks with ease. AKA Citadel 
92+
* [https://www.dehashed.com/](https://www.dehashed.com/) - Premium but well worth it, Breach data site. Can search by multiple types of indicators like email, IP, address, domain, even password.
93+
* [Have I Been Pwned](https://haveibeenpwned.com/) - Check if your email has been compromised in a data breach 
94+
* [Scylla](https://scylla.so/) - One of the greatest breach parsing tools available.
95+
* [https://leak-lookup.com/](https://leak-lookup.com/) - Leak-Lookup allows you to search across thousands of data breaches to stay on top of credentials that may have been compromised, allowing you to proactively stay on top of the latest data leaks with ease. AKA Citadel 
9596
* [https://breachdirectory.org](https://breachdirectory.org) - Search via email address, username or phone number to see censored passwords. They also provide the full password as a SHA-1 hash, which can easily be cracked.
96-
* [https://mypwd.io/](https://mypwd.io) - A tool for monitoring leaked passwords for accounts linked to emails. Actually shows you the leaked passwords.
97-
* [https://leaked.site/](https://leaked.site) - Another leaked database search. Requires a paid subscription.
98-
* [https://weleakinfo.to/](https://weleakinfo.to) - Provides you the best leaked breached databases downloads. Requires a paid subscription.
99-
* [http://4wbwa6vcpvcr3vvf4qkhppgy56urmjcj2vagu2iqgp3z656xcmfdbiqd.onion/](http://4wbwa6vcpvcr3vvf4qkhppgy56urmjcj2vagu2iqgp3z656xcmfdbiqd.onion) - An .onion site that allows you to search through the full 2019 Facebook data breach.
97+
* [https://mypwd.io/](https://mypwd.io/) - A tool for monitoring leaked passwords for accounts linked to emails. Actually shows you the leaked passwords.
98+
* [https://leaked.site/](https://leaked.site/) - Another leaked database search. Requires a paid subscription.
99+
* [https://weleakinfo.to/](https://weleakinfo.to/) - Provides you the best leaked breached databases downloads. Requires a paid subscription.
100+
* [http://4wbwa6vcpvcr3vvf4qkhppgy56urmjcj2vagu2iqgp3z656xcmfdbiqd.onion/](http://4wbwa6vcpvcr3vvf4qkhppgy56urmjcj2vagu2iqgp3z656xcmfdbiqd.onion/) - An .onion site that allows you to search through the full 2019 Facebook data breach.
100101

101102
{% file src="../../.gitbook/assets/Breaches.html" %}
102103

103104
### Paste Tools
104105

105-
* [https://psbdmp.ws/](https://psbdmp.ws) - Pastebin search tool
106-
* [Pastebin.com - #1 paste tool since 2002!](https://pastebin.com) - Search through Paste dumps for various data.
106+
* [https://psbdmp.ws/](https://psbdmp.ws/) - Pastebin search tool
107+
* [Pastebin.com - #1 paste tool since 2002!](https://pastebin.com/) - Search through Paste dumps for various data.
107108
* [https://pastebin.ga](https://pastebin.ga) - Allows you to search over 33 different paste sites. Uses a Google CSE.
108109
* [https://redhuntlabs.com/online-ide-search](https://redhuntlabs.com/online-ide-search) - Search and find strings across multiple IDEs, code aggregators and paste sites.
109110
* [https://doxbin.org](https://doxbin.org) - A document sharing and publishing website which invites users to contribute personally identifiable information (PII), or a "dox" of any person of interest. It previously operated on the darknet as a TOR hidden service.
@@ -112,11 +113,11 @@ Paste sites like Pastebin have recently changed their ability to be parsed. Past
112113

113114
### Misc Tools and Resources
114115

115-
* [Search WikiLeaks](https://search.wikileaks.org) 
116-
* [Cryptome](https://cryptome.org) - Archive of publicly leaked documents. Usually government related.
116+
* [Search WikiLeaks](https://search.wikileaks.org/) 
117+
* [Cryptome](https://cryptome.org/) - Archive of publicly leaked documents. Usually government related.
117118
* [easy-to-read breach list](https://breachalarm.com/sources) - Easy and helpful tracker for breach data.
118-
* [Firefox Monitor](https://monitor.firefox.com) - Great tool for searching if your accounts have been found in a breach and can alert you when new breaches are discovered and parsed.
119-
* [pwd query](https://pwdquery.xyz) - Check if your passwords have been compromised from a data leak...
119+
* [Firefox Monitor](https://monitor.firefox.com/) - Great tool for searching if your accounts have been found in a breach and can alert you when new breaches are discovered and parsed.
120+
* [pwd query](https://pwdquery.xyz/) - Check if your passwords have been compromised from a data leak...
120121
* [Analysis Information Leak framework](https://github.com/ail-project/ail-framework) - AIL is a modular framework to analyze potential information leaks from unstructured data sources like pastes from Pastebin or similar services or unstructured data streams.
121122
* [breach-parse](https://github.com/hmaverickadams/breach-parse) - A tool for parsing breached passwords by The Cyber Mentor. Repo also contains large breach data collections.
122123
* [https://www.reddit.com/r/DataHoarder/](https://www.reddit.com/r/DataHoarder/) - This is a sub that aims at bringing data hoarders together to share their passion with like minded people.
@@ -128,10 +129,10 @@ Ah the gold mine of git repositories. So at the time of writing this, we are sti
128129

129130
There are many great options out there for code repositories, but there are 4 that are the gold standard for checking.
130131

131-
* Github - [https://github.com/](https://github.com)
132-
* GitLab - [https://about.gitlab.com/](https://about.gitlab.com)
133-
* Stack Overflow - [https://stackoverflow.com/](https://stackoverflow.com)
134-
* Source Forge - [https://sourceforge.net/](https://sourceforge.net)
132+
* Github - [https://github.com/](https://github.com/)
133+
* GitLab - [https://about.gitlab.com/](https://about.gitlab.com/)
134+
* Stack Overflow - [https://stackoverflow.com/](https://stackoverflow.com/)
135+
* Source Forge - [https://sourceforge.net/](https://sourceforge.net/)
135136

136137
You can manually parse these by user or subject but there are some handy tools that can help search and keep track.
137138

@@ -144,9 +145,9 @@ You can manually parse these by user or subject but there are some handy tools t
144145
* [https://youtu.be/UwzB5a5GrZk](https://youtu.be/UwzB5a5GrZk)
145146
* [Repo Supervisor](https://github.com/auth0/repo-supervisor) - Find secrets and passwords in your code 
146147
* [Watchman](https://papermtn.co.uk/gitlab-github-watchman/) - Git change monitor 
147-
* [https://grep.app/](https://grep.app) - A search engine for contents of Git Repos
148+
* [https://grep.app/](https://grep.app/) - A search engine for contents of Git Repos
148149
* [gitoops](https://github.com/ovotech/gitoops) - GitOops is a tool to help attackers and defenders identify lateral movement and privilege escalation paths in GitHub organizations by abusing CI/CD pipelines and GitHub access controls.
149-
* [https://searchcode.com/](https://searchcode.com) - Search 75 billion lines of code from 40 million projects
150+
* [https://searchcode.com/](https://searchcode.com/) - Search 75 billion lines of code from 40 million projects
150151
* [https://pentestbook.six2dez.com/enumeration/webservices/github](https://pentestbook.six2dez.com/enumeration/webservices/github)
151152

152153
## **Training**

‎web-app-hacking/web-technologies/README.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,7 @@
3232
* [VX-API](https://github.com/vxunderground/VX-API) - Collection of various WINAPI tricks / features used or abused by Malware
3333
* [https://malapi.io/](https://malapi.io/) - Cheatsheet for commands that could be potentially used for malicious activity.
3434
* [crAPI](https://github.com/OWASP/crAPI) - **c**ompletely **r**idiculous **API** (crAPI) will help you to understand the ten most critical API security risks. crAPI is vulnerable by design, but you'll be able to safely run it to educate/train yourself.
35+
* [https://github.com/Net-hunter121/API-Wordlist](https://github.com/Net-hunter121/API-Wordlist) - A wordlist of API names used for fuzzing web application APIs.
3536
* _Hacking: The next generation - Application Protocol Handlers, pg. 96_
3637

3738
### [GraphQL](https://graphql.org/)

0 commit comments

Comments
 (0)