URLFLUX : A fast web crawler for gathering URLs, JavaScript files, and hidden parameters.

usefull payload :- Mikey1'"><ScRipt>confirm(25)</ScRipt>//

INITIAL RECON FOR PARAMETERS

• [ ] SEARCH THE WEBSITE MANUALLY TO FIND ANY PARAMETERS (ctrl + click ) follow the page and recurssively check for any functionalities to find results.

• [ ] USE GOOGLE DORKS FROM dorks.krazeplanet.com and use them to find parameters using google dorks

  enter the domain name there with *. in the start that makes the domain name looks like ex :- [ *.ably.com ]

[ if no urls are found here then use this below steps , only after google dorking and manual checking]

**run things paralelly on ubuntu and on vps to make things faster

• [ ] [ use it to gather urls using urlflux ]

**echo "example.com" | urlflux | unew urlflux_output.txt**

• [ ] [ use it to get urls specific to one domain ]

**cat urlflux_output.txt | grep "^https://example.com”**  

• [ ] [ use it to gather the specific extension based urls which we can give to X8 tool ]

**cat urlflux_output.txt | grep -aE '\.(php|jsp|jspa|asp|aspx|html)$’**  

• [ ] after this we can use X8 tool to gather parameters if we found any extension based urls

x8 -u [<https://kzlabs.com/6.php>](<https://kzlabs.com/6.php>) -X GET --disable-progress-bar -w params.txt

• [ ] use it to gather parameter based urls

**cat urlflux_output.txt | grep "^https://zeals.ai" |grep "=”**  

• [ ] use it to deduplicate the urls to find the unique urls