⚠️ Disclaimer: All techniques included in this blog is only for educational and ethical vulnerability testing purposes. Author not responsible for any misuse!

Check complete series from beginning

👉 Site: zoomeye.ai

http.body="keyword" && http.header=".json"
http.body="keyword" && http.header="Content-Type: application/json"

http.header="Content-Type: application/json" && http.body="api."

http.header="Content-Type: application/json" && http.body="message"
http.header="Content-Type: application/json" && http.body="status"

http.header="Content-Type: application/json" && http.body="Cannot GET /"

http.header="Content-Type: application/json" && http.body="apiVersion"

http.header="Content-Type: application/json" && http.body="/v1"
http.header="Content-Type: application/json" && http.body="/v2"
http.header="Content-Type: application/json" && http.body="/v3"
http.header="Content-Type: application/json" && http.body="/v4"

http.header="Content-Type: application/json" && http.body="cluster"

wss (Secure web socket protocol)

http.header="Content-Type: application/json" && http.body="wss://"

http.header="Content-Type: application/json" && http.body="GET /" && http.body="chainIds"
http.header="Content-Type: application/json" && http.body="GET /" && http.body="POST /"

⏳ Target filtering

existing_dork && domain="example.com"
existing_dork && ssl.cert.subject.cn="example.com"
existing_dork && asn="asn number of company/org"
existing_dork && org="organization name"
existing_dork && cidr="x.x.x.x/x"

Favicon Hash Recon

existing_dork && iconhash="12345678"

© Medium Copyright AbhirupKonwar All rights reserved!