{"id":28263903,"url":"https://github.com/sh7yk/oneshot-stf","last_synced_at":"2026-02-26T00:34:45.108Z","repository":{"id":291417250,"uuid":"977508905","full_name":"Sh7yk/oneshot-stf","owner":"Sh7yk","description":"Some usefull oneliners for pentesting","archived":false,"fork":false,"pushed_at":"2025-05-18T11:55:52.000Z","size":6,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-05-26T12:59:58.752Z","etag":null,"topics":["oneliners","pentest"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Sh7yk.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-05-04T11:23:27.000Z","updated_at":"2025-05-18T11:55:56.000Z","dependencies_parsed_at":"2025-05-04T14:45:12.324Z","dependency_job_id":null,"html_url":"https://github.com/Sh7yk/oneshot-stf","commit_stats":null,"previous_names":["sh7yk/oneshot-stf"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/Sh7yk/oneshot-stf","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sh7yk%2Foneshot-stf","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sh7yk%2Foneshot-stf/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sh7yk%2Foneshot-stf/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sh7yk%2Foneshot-stf/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Sh7yk","download_url":"https://codeload.github.com/Sh7yk/oneshot-stf/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sh7yk%2Foneshot-stf/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":260505636,"owners_count":23019402,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["oneliners","pentest"],"created_at":"2025-05-20T08:12:16.965Z","updated_at":"2026-02-26T00:34:45.102Z","avatar_url":"https://github.com/Sh7yk.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"One shot for identify live hosts -\u003e detect web services -\u003e find pages possibly containing emails -\u003e collect emails\n```bash\nnmap -sn \u003cip_range\u003e | awk '/Nmap scan report/{print $NF}' | tee alive_hosts.txt | httpxx -silent | tee web_scope.txt | feroxbuster --silent -r --stdin --parallel 20 -k -w /usr/share/wordlists/emails_endpoints.txt -s 200 --dont-scan js,png,jpg,jpeg,css -A \u003e web_urls.txt;touch emails_list.txt; for url in $(cat web_urls.txt);do;cewl $url -d 3 -e -n | grep -v CeWL \u003e\u003e emails_list.txt;done\n```\n\nOne shot for find dns server -\u003e add it to /etc/resolve.conf -\u003e find live hosts -\u003e write their hostnames to /etc/hosts \n```bash\nsudo sh -c 'export ip_range=\u003cip_range\u003e;DNS=$(nmap -Pn -p53 --open $ip_range -oG - | awk \"/\\/open\\//{print \\$2}\" | head -1) \u0026\u0026 [ -n \"$DNS\" ] \u0026\u0026 (echo \"nameserver $DNS\" \u003e\u003e /etc/resolv.conf; for ip in $(nmap -sn $ip_range -oG - | awk \"/Up\\$/{print \\$2}\"); do host=$(dig +short -x $ip @$DNS | sed \"s/\\.$//\"); [ -n \"$host\" ] \u0026\u0026 echo \"$ip $host\" \u0026\u0026 echo \"$ip\\t$host\" \u003e\u003e /etc/hosts; done) | tee ip-host.txt; chmod 644 ip-host.txt'\n```\nOne shot for start your standoff work. to switch between tabs use Ctrl + b release and press the desired tab number\n```bash\nsudo qterminal --title \"ROOT Term\" -e \"bash -c 'tmux new-session -d -s MAIN \\\"sudo -i\\\" \\; new-window -n \\\"VPN STF\\\" \\\"openvpn --config /home/\\$USER/your_config.ovpn --auth-user-pass pass.txt\\\" \\; new-window -n \\\"VPN target\\\" \\; new-window -n \\\"NXC\\\" \\; new-window -n \\\"Proxy\\\" \\\"chisel server --port 8080 --reverse --auth proxy_user:proxy_pass\\\" \\; new-window -n \\\"common\\\" \\; new-window -n \\\"metasploit\\\" \\\"msfconsole\\\" \\; select-window -t 0 \\; attach'\"\n```\nAnother nmap+naabu+cherrymap oneshot\n```bash\nsudo naabu -list alive_hosts.txt -j -top-ports 1000 -o open_ports.txt \u0026\u0026 nmap -sV -sC -iL alive_hosts.txt -p $(jq .port open_ports.txt | awk 'NR==1 {printf \"%s\",$0; next} {printf \",%s\",$0}') -oA nmap_result; sudo cherrymap.py nmap_result.xml\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsh7yk%2Foneshot-stf","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsh7yk%2Foneshot-stf","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsh7yk%2Foneshot-stf/lists"}