You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Commit c4fed0a
Browse filesBrowse the repository at this point in the historyBrowse files
*[Google Custom Search Engine for Documents](https://cse.google.com/cse?cx=001580308195336108602:vvchyaurf\_4#gsc.tab=0)
14
-
*[http://www.uvrx.com/](http://www.uvrx.com) - The most comprehensive online file storage search engine. They have individual search engines for badongo, Mediafire, Zshare, 4shared and taringa. They also provide a search all function that searches filefactory, depositfiles, easy-share, sharedzilla, sendspace, yousendit, letitbit, drop, sharebee, rapidspread, and many others.
14
+
*[http://www.uvrx.com/](http://www.uvrx.com/) - The most comprehensive online file storage search engine. They have individual search engines for badongo, Mediafire, Zshare, 4shared and taringa. They also provide a search all function that searches filefactory, depositfiles, easy-share, sharedzilla, sendspace, yousendit, letitbit, drop, sharebee, rapidspread, and many others.
15
15
*[PowerMeta](https://github.com/dafthack/PowerMeta) - PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.
16
16
*[goofile](https://www.kali.org/tools/goofile/) - Use this tool to search for a specific file type in a given domain.
17
17
*[FilePhish](https://cartographia.github.io/FilePhish/) - A simple OSINT Google query builder for fast and easy document and file discovery.
@@ -21,22 +21,22 @@ Documents.html is a tool that allows you to take a search term related to your t
21
21
22
22
*[http://palined.com/search/](http://palined.com/search/) - Search for files and open directories via keyword. Uses a Google CSE.
23
23
*[https://www.filechef.com](https://www.filechef.com) - Search for open directories and files on the web or in Google Drives via keywords. Including document, video, audio, image and executable files. Uses Google dorks.
24
-
*[Napalm FTP Indexer](https://www.searchftps.net) - Search for documents in public FTP servers
*[GreyhatWarfare Public AWS Buckets](https://buckets.grayhatwarfare.com/) - Search for publically acessible AWS S3 buckets.
27
+
*[MS Azure Portal](https://ms.portal.azure.com/) - Search for public blobs
28
28
*[https://osint.sh/buckets/](https://osint.sh/buckets/) - Find public AWS and Azure buckets and documents via keyword.
29
-
*[https://www.gdrivesearch.com/](https://www.gdrivesearch.com) - A simple and fast tool that allows you to search Google Drive for files.
29
+
*[https://www.gdrivesearch.com/](https://www.gdrivesearch.com/) - A simple and fast tool that allows you to search Google Drive for files.
30
30
*[https://www.reddit.com/r/opendirectories/](https://www.reddit.com/r/opendirectories/) - Unprotected directories of pics, vids, music, software and otherwise interesting files.
31
31
32
32
### Article, Presentation, and Book search
33
33
34
-
*[https://libgen.rs/](https://libgen.rs) - This is the largest free library in human history. Giving the world free access to over 84 million scholarly journals, over 6.6 million academic and general-interest books, over 2.2 million comics, and over 381 thousand magazines. Commonly referred to as "Libgen" for short. Libgen has zero regard for copyright.
35
-
*[https://sci-hub.se/](https://sci-hub.se) - A "shadow library" that provides free access to millions of research papers and books by bypassing paywalls. SciHub has zero regard for copyright.
34
+
*[https://libgen.rs/](https://libgen.rs/) - This is the largest free library in human history. Giving the world free access to over 84 million scholarly journals, over 6.6 million academic and general-interest books, over 2.2 million comics, and over 381 thousand magazines. Commonly referred to as "Libgen" for short. Libgen has zero regard for copyright.
35
+
*[https://sci-hub.se/](https://sci-hub.se/) - A "shadow library" that provides free access to millions of research papers and books by bypassing paywalls. SciHub has zero regard for copyright.
36
36
*[https://the-eye.eu/public](https://the-eye.eu/public) - An open directory data archive dedicated to the long-term preservation of any and all data including websites, books, games, software, video, audio, other digital-obscura and ideas. Currently hosts over 140TB of data for free.
37
37
*[https://eyedex.org](https://eyedex.org) - A searchable index of the-eye.eu. Much faster than manually digging through subfolders or using Google dorks.
38
38
*[https://doaj.org](https://doaj.org) - Search over 16,000 journals, over 6.5 million articles in 80 different languages from 129 different countries.
39
-
*[https://www.slideshare.net/](https://www.slideshare.net) - Allows users to upload content including presentations, infographics, documents, and videos. Users can upload files privately or publicly in PowerPoint, Word, PDF, or OpenDocument format
39
+
*[https://www.slideshare.net/](https://www.slideshare.net/) - Allows users to upload content including presentations, infographics, documents, and videos. Users can upload files privately or publicly in PowerPoint, Word, PDF, or OpenDocument format
40
40
*[https://slideshare-downloader.herokuapp.com](https://slideshare-downloader.herokuapp.com) - Enter the URL of any Slideshare document and this tool will download it for you.
41
41
42
42
@@ -54,31 +54,32 @@ While having other functionality Michael Bazzell's **Images.html** and **Videos.
*[CameraTrace](http://www.cameratrace.com/trace) - Trace the location a camera has been by the metadata it embeds in photos that end up on the internet.
57
-
*[FotoForensics](https://fotoforensics.com) - Free and public photo forensics tools.
*[https://github.com/GuidoBartoli/sherloq](https://github.com/GuidoBartoli/sherloq) - An open-source digital image forensic toolset
60
-
*[https://www.peteyvid.com/](https://www.peteyvid.com) - A video and audio search engine that searches over 70 different platforms.
60
+
*[https://www.peteyvid.com/](https://www.peteyvid.com/) - A video and audio search engine that searches over 70 different platforms.
61
61
* Reverse Image Search
62
-
*[The Wolfram Language Image Identification Project](https://www.imageidentify.com) 
63
-
*[pic.sogou.com](https://pic.sogou.com) — chinese reverse image search engine
64
-
*[Image So Search](https://image.so.com) — Qihoo 360 Reverse Images Search
62
+
*[The Wolfram Language Image Identification Project](https://www.imageidentify.com/) 
63
+
*[pic.sogou.com](https://pic.sogou.com/) — chinese reverse image search engine
64
+
*[Image So Search](https://image.so.com/) — Qihoo 360 Reverse Images Search
65
65
*[Revesearch.com](https://revesesearch.com) — allows to upload an image once and immediately search for it in #Google, #Yandex, and #Bing.
66
66
*[Pixsy](https://pixsy.com) — allows to upload pictures from computer, social networks or cloud storages, and then search for their duplicates and check if they are copyrighted
67
67
*[Image Search Assistant](https://chrome.google.com/webstore/detail/image-search-assistant/kldhhobmmejaeaiilomaibhjlcfpceac/related) — searches for a picture, screenshot or fragment of a screenshot in several search engines and stores at once
68
68
*[openi.nlm.nih.gov](https://openi.nlm.nih.gov/gridquery) — Reverse image search engine for scientific and medical images
69
69
*[DepositPhotos Reverse Image Search](https://ru.depositphotos.com/search/by-images.html) — tool for reverse image search (strictly from DepositPhoto's collection of 222 million files).
70
-
*[EveryPixel](https://www.everypixel.com) — Reverse image search engine. Search across 50 leading stock images agencies. It's possible to filter only free or only paid images.
70
+
*[EveryPixel](https://www.everypixel.com/) — Reverse image search engine. Search across 50 leading stock images agencies. It's possible to filter only free or only paid images.
*[pictriev](http://pictriev.com) - Search engine for faces. Upload the picture of choice and find links to other pictures with similar people.
73
+
*[pictriev](http://pictriev.com/) - Search engine for faces. Upload the picture of choice and find links to other pictures with similar people.
73
74
*[PimEyes](https://pimeyes.com/en) - Facial recognition and reverse image search
74
75
*[Portrait Matcher](http://zeus.robots.ox.ac.uk/portraitmatcher/index?error=agree) — Upload a picture of a face and get three paintings that show similar people.
75
-
*[FindFace](https://findface.pro) - Russian face search engine.
76
+
*[FindFace](https://findface.pro/) - Russian face search engine.
76
77
*[Face Recognition](https://github.com/ageitgey/face\_recognition) — facial recognition api for Python and the command line
77
-
*[Search4faces.com](https://search4faces.com) — search people in VK, Odnoklassniki, TikTok and ClubHouse by photo or identikit
78
+
*[Search4faces.com](https://search4faces.com/) — search people in VK, Odnoklassniki, TikTok and ClubHouse by photo or identikit
78
79
* Clothing/Shopping
79
-
*[Searchbyimage.app](https://searchbyimage.app) — search clothes in online shops
80
+
*[Searchbyimage.app](https://searchbyimage.app/) — search clothes in online shops
80
81
*[Aliseeks.com](https://www.aliseeks.com/search) — search items by photo in AliExpress and Ebay
@@ -88,22 +89,22 @@ The below tools and links can be used to parse data in known data breaches and l
88
89
\
89
90
Paste sites like Pastebin have recently changed their ability to be parsed. Pastebin itself has removed the ability to to search its pastes. However, with a bit of clever google dorking, you can still search for breach data by submitting your search along with "insite:pastebin.com"
90
91
91
-
*[https://www.dehashed.com/](https://www.dehashed.com) - Premium but well worth it, Breach data site. Can search by multiple types of indicators like email, IP, address, domain, even password.
92
-
*[Have I Been Pwned](https://haveibeenpwned.com) - Check if your email has been compromised in a data breach 
93
-
*[Scylla](https://scylla.so) - One of the greatest breach parsing tools available.
94
-
*[https://leak-lookup.com/](https://leak-lookup.com) - Leak-Lookup allows you to search across thousands of data breaches to stay on top of credentials that may have been compromised, allowing you to proactively stay on top of the latest data leaks with ease. AKA Citadel 
92
+
*[https://www.dehashed.com/](https://www.dehashed.com/) - Premium but well worth it, Breach data site. Can search by multiple types of indicators like email, IP, address, domain, even password.
93
+
*[Have I Been Pwned](https://haveibeenpwned.com/) - Check if your email has been compromised in a data breach 
94
+
*[Scylla](https://scylla.so/) - One of the greatest breach parsing tools available.
95
+
*[https://leak-lookup.com/](https://leak-lookup.com/) - Leak-Lookup allows you to search across thousands of data breaches to stay on top of credentials that may have been compromised, allowing you to proactively stay on top of the latest data leaks with ease. AKA Citadel 
95
96
*[https://breachdirectory.org](https://breachdirectory.org) - Search via email address, username or phone number to see censored passwords. They also provide the full password as a SHA-1 hash, which can easily be cracked.
96
-
*[https://mypwd.io/](https://mypwd.io) - A tool for monitoring leaked passwords for accounts linked to emails. Actually shows you the leaked passwords.
97
-
*[https://leaked.site/](https://leaked.site) - Another leaked database search. Requires a paid subscription.
98
-
*[https://weleakinfo.to/](https://weleakinfo.to) - Provides you the best leaked breached databases downloads. Requires a paid subscription.
99
-
*[http://4wbwa6vcpvcr3vvf4qkhppgy56urmjcj2vagu2iqgp3z656xcmfdbiqd.onion/](http://4wbwa6vcpvcr3vvf4qkhppgy56urmjcj2vagu2iqgp3z656xcmfdbiqd.onion) - An .onion site that allows you to search through the full 2019 Facebook data breach.
97
+
*[https://mypwd.io/](https://mypwd.io/) - A tool for monitoring leaked passwords for accounts linked to emails. Actually shows you the leaked passwords.
98
+
*[https://leaked.site/](https://leaked.site/) - Another leaked database search. Requires a paid subscription.
99
+
*[https://weleakinfo.to/](https://weleakinfo.to/) - Provides you the best leaked breached databases downloads. Requires a paid subscription.
100
+
*[http://4wbwa6vcpvcr3vvf4qkhppgy56urmjcj2vagu2iqgp3z656xcmfdbiqd.onion/](http://4wbwa6vcpvcr3vvf4qkhppgy56urmjcj2vagu2iqgp3z656xcmfdbiqd.onion/) - An .onion site that allows you to search through the full 2019 Facebook data breach.
*[Pastebin.com - #1 paste tool since 2002!](https://pastebin.com/) - Search through Paste dumps for various data.
107
108
*[https://pastebin.ga](https://pastebin.ga) - Allows you to search over 33 different paste sites. Uses a Google CSE.
108
109
*[https://redhuntlabs.com/online-ide-search](https://redhuntlabs.com/online-ide-search) - Search and find strings across multiple IDEs, code aggregators and paste sites.
109
110
*[https://doxbin.org](https://doxbin.org) - A document sharing and publishing website which invites users to contribute personally identifiable information (PII), or a "dox" of any person of interest. It previously operated on the darknet as a TOR hidden service.
@@ -112,11 +113,11 @@ Paste sites like Pastebin have recently changed their ability to be parsed. Past
*[Cryptome](https://cryptome.org/) - Archive of publicly leaked documents. Usually government related.
117
118
*[easy-to-read breach list](https://breachalarm.com/sources) - Easy and helpful tracker for breach data.
118
-
*[Firefox Monitor](https://monitor.firefox.com) - Great tool for searching if your accounts have been found in a breach and can alert you when new breaches are discovered and parsed.
119
-
*[pwd query](https://pwdquery.xyz) - Check if your passwords have been compromised from a data leak...
119
+
*[Firefox Monitor](https://monitor.firefox.com/) - Great tool for searching if your accounts have been found in a breach and can alert you when new breaches are discovered and parsed.
120
+
*[pwd query](https://pwdquery.xyz/) - Check if your passwords have been compromised from a data leak...
120
121
*[Analysis Information Leak framework](https://github.com/ail-project/ail-framework) - AIL is a modular framework to analyze potential information leaks from unstructured data sources like pastes from Pastebin or similar services or unstructured data streams.
121
122
*[breach-parse](https://github.com/hmaverickadams/breach-parse) - A tool for parsing breached passwords by The Cyber Mentor. Repo also contains large breach data collections.
122
123
*[https://www.reddit.com/r/DataHoarder/](https://www.reddit.com/r/DataHoarder/) - This is a sub that aims at bringing data hoarders together to share their passion with like minded people.
@@ -128,10 +129,10 @@ Ah the gold mine of git repositories. So at the time of writing this, we are sti
128
129
129
130
There are many great options out there for code repositories, but there are 4 that are the gold standard for checking.
*[https://grep.app/](https://grep.app) - A search engine for contents of Git Repos
148
+
*[https://grep.app/](https://grep.app/) - A search engine for contents of Git Repos
148
149
*[gitoops](https://github.com/ovotech/gitoops) - GitOops is a tool to help attackers and defenders identify lateral movement and privilege escalation paths in GitHub organizations by abusing CI/CD pipelines and GitHub access controls.
149
-
*[https://searchcode.com/](https://searchcode.com) - Search 75 billion lines of code from 40 million projects
150
+
*[https://searchcode.com/](https://searchcode.com/) - Search 75 billion lines of code from 40 million projects
Copy file name to clipboardExpand all lines: web-app-hacking/web-technologies/README.md
+1Lines changed: 1 addition & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,6 +32,7 @@
32
32
*[VX-API](https://github.com/vxunderground/VX-API) - Collection of various WINAPI tricks / features used or abused by Malware
33
33
*[https://malapi.io/](https://malapi.io/) - Cheatsheet for commands that could be potentially used for malicious activity.
34
34
*[crAPI](https://github.com/OWASP/crAPI) - **c**ompletely **r**idiculous **API** (crAPI) will help you to understand the ten most critical API security risks. crAPI is vulnerable by design, but you'll be able to safely run it to educate/train yourself.
35
+
*[https://github.com/Net-hunter121/API-Wordlist](https://github.com/Net-hunter121/API-Wordlist) - A wordlist of API names used for fuzzing web application APIs.
35
36
*_Hacking: The next generation - Application Protocol Handlers, pg. 96_
0 commit comments