10 min

JavaScript Enumeration for bug bounty hunters Hack for Fun and Profit

    • How To

JavaScript Enumeration is a critical skill to have if you want to level  up your penetration testing or bug bounty hunting game. Yet, not  everyone does it, partly because it is a boring exercise or it consumes  most of your time, not to mention how intimidated you might feel reading  someone else’s code. Today, we will explore this topic and understand  why it matters, and how you can perform it.   

Further reads mentioned in the video: 

https://thehackerish.com/cross-site-scripting-xss-explained/ 

https://portswigger.net/web-security/cross-site-scripting/dom-based 

https://labs.detectify.com/2016/12/15/postmessage-xss-on-a-million-sites/ 

https://medium.com/@alex.birsan/the-bug-that-exposed-your-paypal-password-539fc2896da9   



Download your FREE Web hacking LAB:  https://thehackerish.com/owasp-top-10-lab-vm-free 

Read more on the blog: https://thehackerish.com 

Facebook Page: https://www.facebook.com/thehackerish 

Follow us on Twitter: https://twitter.com/thehackerish

JavaScript Enumeration is a critical skill to have if you want to level  up your penetration testing or bug bounty hunting game. Yet, not  everyone does it, partly because it is a boring exercise or it consumes  most of your time, not to mention how intimidated you might feel reading  someone else’s code. Today, we will explore this topic and understand  why it matters, and how you can perform it.   

Further reads mentioned in the video: 

https://thehackerish.com/cross-site-scripting-xss-explained/ 

https://portswigger.net/web-security/cross-site-scripting/dom-based 

https://labs.detectify.com/2016/12/15/postmessage-xss-on-a-million-sites/ 

https://medium.com/@alex.birsan/the-bug-that-exposed-your-paypal-password-539fc2896da9   



Download your FREE Web hacking LAB:  https://thehackerish.com/owasp-top-10-lab-vm-free 

Read more on the blog: https://thehackerish.com 

Facebook Page: https://www.facebook.com/thehackerish 

Follow us on Twitter: https://twitter.com/thehackerish

10 min