d2bc52905d
New vectors added: - 22: SSRF Proof — cloud metadata exfiltration (CRITICAL) - 23: Prototype Pollution — Node.js client/server (HIGH) - 24: WebSocket Hijack — WS origin bypass + injection (HIGH) - 25: Mass Assignment — protected field modification (HIGH) - 26: HTTP Parameter Pollution — WAF bypass (HIGH) - 27: Insecure Deserialization — PHP/Java/Node (CRITICAL) - 28: OAuth Takeover — redirect_uri / state / CSRF (CRITICAL) - 29: Web Cache Poisoning — unkeyed header injection (HIGH) - 30: CRLF Injection — HTTP response splitting (CRITICAL) All vectors PROVE exploitation by dumping data/credentials, not just detecting config issues.
201 lines
2.6 KiB
Plaintext
201 lines
2.6 KiB
Plaintext
google.com
|
|
gtld-servers.net
|
|
cloudflare.com
|
|
gstatic.com
|
|
facebook.com
|
|
microsoft.com
|
|
googleapis.com
|
|
youtube.com
|
|
amazonaws.com
|
|
apple.com
|
|
instagram.com
|
|
mail.ru
|
|
ezviz7.com
|
|
fbcdn.net
|
|
akamai.net
|
|
dzen.ru
|
|
twitter.com
|
|
linkedin.com
|
|
googletagmanager.com
|
|
googlevideo.com
|
|
live.com
|
|
office.com
|
|
akamaiedge.net
|
|
akadns.net
|
|
amazon.com
|
|
hicloudcam.com
|
|
azure.com
|
|
wikipedia.org
|
|
domaincontrol.com
|
|
github.com
|
|
bing.com
|
|
whatsapp.net
|
|
doubleclick.net
|
|
fastly.net
|
|
googleusercontent.com
|
|
apple-dns.net
|
|
appsflyersdk.com
|
|
trafficmanager.net
|
|
microsoftonline.com
|
|
aaplimg.com
|
|
netflix.com
|
|
office.net
|
|
wordpress.org
|
|
digicert.com
|
|
skype.com
|
|
sharepoint.com
|
|
youtu.be
|
|
ripn.net
|
|
gandi.net
|
|
pinterest.com
|
|
cloudfront.net
|
|
goo.gl
|
|
x.com
|
|
whatsapp.com
|
|
cloud.microsoft
|
|
googlesyndication.com
|
|
yahoo.com
|
|
icloud.com
|
|
windowsupdate.com
|
|
tiktok.com
|
|
msn.com
|
|
cloudflare.net
|
|
spotify.com
|
|
googledomains.com
|
|
adobe.com
|
|
roblox.com
|
|
windows.net
|
|
gvt1.com
|
|
ntp.org
|
|
wa.me
|
|
chatgpt.com
|
|
vimeo.com
|
|
akam.net
|
|
myfritz.net
|
|
tiktokcdn.com
|
|
gvt2.com
|
|
zoom.us
|
|
edgekey.net
|
|
qq.com
|
|
workers.dev
|
|
pv-cdn.net
|
|
baidu.com
|
|
cdninstagram.com
|
|
windows.com
|
|
yandex.net
|
|
tiktokv.com
|
|
cloudflare-dns.com
|
|
nginx.org
|
|
ytimg.com
|
|
mozilla.org
|
|
nic.ru
|
|
opera.com
|
|
yandex.ru
|
|
samsung.com
|
|
edgesuite.net
|
|
nginx.com
|
|
sentry.io
|
|
wordpress.com
|
|
reddit.com
|
|
gwfb.net
|
|
root-servers.net
|
|
okcdn.ru
|
|
ui.com
|
|
discord.gg
|
|
bit.ly
|
|
google-analytics.com
|
|
office365.com
|
|
t.me
|
|
blogspot.com
|
|
a2z.com
|
|
criteo.com
|
|
europa.eu
|
|
trbcdn.net
|
|
b-cdn.net
|
|
vk.com
|
|
vedcdnlb.com
|
|
github.io
|
|
googleadservices.com
|
|
snapchat.com
|
|
app-measurement.com
|
|
unity3d.com
|
|
amazon-adsystem.com
|
|
apache.org
|
|
epicgames.com
|
|
nih.gov
|
|
registrar-servers.com
|
|
amazonvideo.com
|
|
outlook.com
|
|
cdn77.org
|
|
dns.google
|
|
app-analytics-services.com
|
|
mailinabox.email
|
|
amazon.dev
|
|
prodregistryv2.org
|
|
kaspersky.com
|
|
msftncsi.com
|
|
vkuserphoto.ru
|
|
gravatar.com
|
|
intuit.com
|
|
forms.gle
|
|
dropbox.com
|
|
godaddy.com
|
|
f5.com
|
|
iiko.it
|
|
xiaomi.com
|
|
dnsowl.com
|
|
yccdn.ru
|
|
miit.gov.cn
|
|
reg.ru
|
|
archive.org
|
|
spo-msedge.net
|
|
steamserver.net
|
|
nytimes.com
|
|
tumblr.com
|
|
azurefd.net
|
|
paypal.com
|
|
ax-msedge.net
|
|
msftconnecttest.com
|
|
one.one
|
|
discord.com
|
|
shopify.com
|
|
aliyuncs.com
|
|
applovin.com
|
|
dns-parking.com
|
|
adobe.io
|
|
nflxso.net
|
|
3gppnetwork.org
|
|
ggpht.com
|
|
static.microsoft
|
|
macromedia.com
|
|
azurewebsites.net
|
|
flickr.com
|
|
adtrafficquality.google
|
|
userapi.com
|
|
aws.dev
|
|
jomodns.com
|
|
soundcloud.com
|
|
ipv4only.arpa
|
|
medium.com
|
|
hichina.com
|
|
bytefcdn-oversea.com
|
|
wac-msedge.net
|
|
w3.org
|
|
tm-azurefd.net
|
|
webex.com
|
|
cdn-apple.com
|
|
taboola.com
|
|
example.com
|
|
theguardian.com
|
|
cnn.com
|
|
edgcdn.net
|
|
rubiconproject.com
|
|
vungle.com
|
|
sfx.ms
|
|
shifen.com
|
|
oracle.com
|
|
msedge.net
|
|
forbes.com
|
|
creativecommons.org
|
|
nic.direct
|