This is a simple guide to perform javascript recon in the bugbounty
- The first step is to collect possibly several javascript files (
more files=more paths,parameters->more vulns)
| # Description: Boxstarter Script | |
| # Author: kfalconspb | |
| # Last Updated: 20180429 | |
| # | |
| # Install boxstarter: | |
| # . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force | |
| # | |
| # You might need to set: Set-ExecutionPolicy RemoteSigned | |
| # | |
| # Run this boxstarter by calling the following from an **elevated** command-prompt: |
| # Description: Boxstarter Script | |
| # Author: Jess Frazelle <[email protected]> | |
| # Last Updated: 2017-09-11 | |
| # | |
| # Install boxstarter: | |
| # . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force | |
| # | |
| # You might need to set: Set-ExecutionPolicy RemoteSigned | |
| # | |
| # Run this boxstarter by calling the following from an **elevated** command-prompt: |
| # Description: Boxstarter Script # Author: ElJefeDSecurIT # Last Updated: 2017-10-10 # # Install boxstarter: # . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force # # You might need to set: Set-ExecutionPolicy RemoteSigned # # Run this boxstarter by calling the following from an **elevated** command-prompt: # start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST> # OR # Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots # # Learn more: http://boxstarter.org/Learn/WebLauncher # heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years... # little things... small, exlusively paranoid things... #---- TEMPORARY --- Disable-UAC #---- PERMANENT --- # ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol #--- Fonts --- #E |