Get Secrets From WayBack HTTP Responses

Sometimes exposed credentials, API keys and private company data could be leaked in HTTP responses, this workflow is tailored to find all of the URLs for specified hostnames and search for strings with high entropy.

Complexity: advanced

Category: Secret Discovery

Tools

Setup

Inputs for this workflow are the hostnames or web servers you want to get all of the URLs in search of credentials leakage.

Execution and results

After setup workflow is ready to be executed. Once workflow last nodes, dumpsterdiver tool and zip-to-out script, are finished result can be viewed and downloaded.

dumpsterdiver tool will contain JSON with the high entropy strings and paths, and zip-to-out script will contain all of the responses saved for easier search.

Try it out!

This workflow is available in the Library, you can copy it and execute it immediately!

This workflow is using small machines by default, and it might break on larger inputs, consider changing the machine type for each node if you plan to use the larger list of hostnames.

Improve this workflow

Consider using-splitters to be able to execute the workflow on list of company names
Implement a mechanism to merge all of the previous results through scheduling and get-trickest-output

Getting started

Knowledge hub

Tutorials

Concepts