JavaScript Enumeration in practice with a live example
Вставка
- Опубліковано 7 лют 2025
- JavaScript Enumeration is a critical skill to have if you want to level up your penetration testing or bug bounty hunting game. Today, you will practice what you've learnt in the previous Javascript enumeration video.
Download your FREE Web hacking LAB: thehackerish.c...
Read more on the blog: thehackerish.com
Facebook Page: / thehackerish
Follow us on Twitter: / thehackerish
Listen on Anchor: anchor.fm/theh...
Listen on Spotify: open.spotify.c...
Listen on Google Podcasts: podcasts.googl...
Hopefully, this episode will help you overcome these hurdles and give you the tools you need to make JavaScript Enumeration less painful.
This video should not have that dislike button. Awesome. Learning new stuff everyday from your videos. I have started following you on twitter today. Thanks for your sharing. You're nice.
Thanks for your kind feedback! Enjoy!
Always looking for this kind of video. Keep uploading and don't hesitate to make long video
I dont know why, i feel very fresh while watching this guy's video
That's flattering, thanks for the feedback :)
I mainly use automations like linkfind3r. Bt sometimes doing manual enumeration is also worth it. Nice Understanding Video👍.
your channel videos are golden. i really like to your channel i see the lot of youtube channel but your channel one of best channel
Oh! Thank you so much for this kind comment! It means a lot!
This is wonderful. Thanks. Learned lot that previously unknown.
I am glad you learned something new, keep up!
Great information👏👏
@thehackerish This video literaly awwsome i readed my blogs and books about the JS but your video helps me a lot
Happy to help :) thanks for your feedback
@@thehackerish thankyou for helping beginners
Happy hackinh
You are amazing, please keep up with practicals.
Amazing
This was so much educational. Please make more videos on chrome devtools.
Glad it helped! Thanks for the feedback!
Great video! Thanks. I look forward to seeing all the other videos on your channel
Enjoy!
That was helpful 😸
Very helpful bro. Ty
wow this was really helpful thanks so much awesome video
I'm glad it helped you, thanks for your feedback!
Great as always :)
Really very helpful. Is it possible if a video can be made on how to look for DOM XSS by analyzing js files.
Thanks for your feedback, I will think about it.
Grate vedieo . You said here methodology grep the secret , api key , api endpoint etc . And other pass and jucy with manually with putting our keyword with grep command but there is different tool available for you can grep all this thing with put only js file secret , api key , password , etc. What you suggest automate tools better or manually test with you said in this vedieo.
Thanks in advance
If I understood correctly, you want a way to automate this. Well, you can use gf from tomnomnom, which I mentioned in the video. And use a shell script that you can run in a cron job.
can you tell me the name of the music that plays towards the end of your video after 23:25
To gud love u
Awesome video .can you give some tips for iOS application bug bounty
That's not my strength, sorry :(
This is a great tutorial videos, im a new subscriber!
how can i use linux based codes in windows?
some people use linux as their primary, but i never seen a video where they execute burp and bug bounty in windows.
Good point! Most of the hacking tools will need the command line. You can use Cygwin on Windows, or spin up a docker linux container in no time.
Can you plz make a video for intermediate hackers means I stared 5 moths ago with zero knowledge about technology means I have dropped my clg so I was spending nearly 10-14 hours day learning bug bounty so in 5 months I have made gud progress means goten 10 bounty form bugcrowd and 4 form hackerone but they all were p4 and p3 form last 20 days when I decided to level up my game by finding p1 bug I failed so hard now I studying every bug deeply and giving deep dives in for p1 bug it the problem is when I learning p4 and p3 bug I was learning this so quickly and then I can find same on live website but when but now when I trying for sql injection lfi rce I not getting anything so I am getting so much demotivated because I can’t see my growth like p4 and p3 bugs so how cloud I tell myself that I learning and how should I motivate myself
No one talk about this stuff ie moving form medium level to advance level all talk about burnout and staring bug bounty if you made i video on it will be really so useful
Thanks for your feedback! All I can say is that you are on the right track. There is nothing you can do other than continue learning. If you love hacking so much, it will drive you. You can also engage with the community, make hacking friends and exchange knowledge to stay motivated. I hope this helps!
brother im beginner tell what i need to learn i know js basics and web should i start learn owasp 10 and practice ? or what ?
Great video, just a suggestion please remove background music. Love listening your voice only.
Thanks for the feedback. I will put a poll about the background music since I've had other who enjoyed it. Stay tuned!
@@thehackerish alright thanks mate! It just a suggestion, if people wants that, then that's ok for me.😊
❤️❤️❤️❤️ 🔥🔥🔥🔥🔥🔥🙄😀☺️
this wasn't as difficult as it sounds!
Yup! Time to hack!
@@thehackerish Don't have pro burp. Started installing scripthunter. It needs lots of modules to work properly.
@@tanercoder1915 I saw it, seems that all the dependencies are go based, so if you already watched my bb methodology, you should have some :) You can also scrape javascript files using bash or python, then fetch them and continue from there.
@@thehackerish right! scrape using python! may be my scrapy skills can be of use here. never thought of scraping js files only some data from sites.