Hack for Fun and Profit
Hack for Fun and Profit
thehackerish
JavaScript Enumeration for bug bounty hunters
10 minutes Posted Dec 24, 2020 at 6:57 pm.
0:00
10:55
Download MP3
Show notes

JavaScript Enumeration is a critical skill to have if you want to level  up your penetration testing or bug bounty hunting game. Yet, not  everyone does it, partly because it is a boring exercise or it consumes  most of your time, not to mention how intimidated you might feel reading  someone else’s code. Today, we will explore this topic and understand  why it matters, and how you can perform it.   

Further reads mentioned in the video: 

https://thehackerish.com/cross-site-scripting-xss-explained/ 

https://portswigger.net/web-security/cross-site-scripting/dom-based 

https://labs.detectify.com/2016/12/15/postmessage-xss-on-a-million-sites/ 

https://medium.com/@alex.birsan/the-bug-that-exposed-your-paypal-password-539fc2896da9   


Download your FREE Web hacking LAB:  https://thehackerish.com/owasp-top-10-lab-vm-free 

Read more on the blog: https://thehackerish.com 

Facebook Page: https://www.facebook.com/thehackerish 

Follow us on Twitter: https://twitter.com/thehackerish