prodigysml / dr.-watson Goto Github PK

https://github.com/hisxo/gitGraber/blob/master/tokens.py

The "Asset Discovered" function doesn't duplicate findings (e.g. test.beta.com) on the same page (e.g. /finance.html) but replicates duplicate findings across different pages (e.g. /contact.html).

Perform a python check that, similar to the finding on the same page, doesn't push a result to a duplicate finding on a separate/unique page. If you'd like a code example, I can add one.

This will reduce false positives, clutter and only result in unique findings.

Also - might be worth creating an inbuilt blacklist of certain non-important asset discoveries.

e.g:

schemas
w3.org
macromedia

java.lang.Exception: Failed to open Jython JAR file
at burp.et5.(Unknown Source)
at burp.dgg.a(Unknown Source)
at burp.ld.lambda$panelLoaded$0(Unknown Source)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:835)

https://github.com/random-robbie/keywords/blob/master/keywords.txt

Thanks @xYantix !

Raise by @n33dle, adding in the following API keys:
https://github.com/OctopusDeploy/OctopusDeploy-Api/wiki/Authentication

https://raw.githubusercontent.com/xyele/secretx/master/patterns.json

Nice work man, here's an example of an incorrect identification of a subdomain

There are often pieces of information added within comments. It may be worth adding a check to alert if something is discovered within these tags. eg.