Md Saikat 0xh7ml

Description

This is a simple guide to perform javascript recon in the bugbounty

The first step is to collect possibly several javascript files (more files = more paths,parameters -> more vulns)

	<!DOCTYPE html>
	<html lang="en">
	<head>
	<meta charset="UTF-8">
	<title>ReqBin UI</title>
	<link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" rel="stylesheet">
	</head>

	<body class="bg-light">
	<div class="container py-4">

	import pyautogui
	import time
	import csv

	# Open the CSV file
	with open('sample.csv', 'r', newline='') as file:
	r = csv.reader(file)

	# Prompt before starting the process (only once)
	pyautogui.alert('Click OK to start the process.')

	// Define the pins for the PIR sensor and the buzzer
	const int pirPin = 2; // PIR sensor output pin
	const int buzzerPin = 8; // Buzzer pin

	void setup() {
	pinMode(pirPin, INPUT); // Set PIR sensor pin as input
	pinMode(buzzerPin, OUTPUT); // Set buzzer pin as output
	Serial.begin(9600); // Initialize serial communication at 9600 bps
	}

	<?php

	//
	$server = 'localhost';
	$user = 'root';
	$pass = '';
	$db = 'db_dvwa';

	// server_name, user_name, password, database name
	$cursor = mysqli_connect($server, $user,$pass, $db );

	#!/bin/bash
	echo "Installing Docker"
	sudo apt update
	sudo apt install apt-transport-https ca-certificates curl software-properties-common
	curl -fsSL https://download.docker.com/linux/ubuntu/gpg \| sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
	echo "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" \| sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
	sudo apt update
	sudo apt install docker-ce docker-ce-cli containerd.io
	sudo systemctl start docker
	sudo systemctl enable docker

	#! /bin/bash

	## This script fetch js files from a domain name and make a wordlist by words in js files
	## Credit: https://gist.github.com/aufzayed/6cabed910c081cc2f2186cd27b80f687

	##### Install requirements #####
	##### Before running this script you should install Go #####

	## Install subjs (https://github.com/lc/subjs)
	GO111MODULE=on go get -u -v github.com/lc/subjs