🕵️‍♂️ Bug Bounty Tip - Extract JavaScript File URLs from Any Page!

Forget opening DevTools - use this bookmarklet to instantly extract all .js file URLs and download them in a .txt file.

🚀 Why this matters:

Quickly collect all linked JavaScript files
Use them for static analysis (LinkFinder, SecretFinder, etc.)
Great for recon, endpoint discovery & auth bypasses

📌 Bookmarklet Code:
javascript:(function(){let urls=[];document.querySelectorAll('*').forEach(e=>{urls.push(e.src,e.href,e.url)});urls=[...new Set(urls)].filter(u=>u&&u.endsWith('.js')).join('\n');let blob=new Blob([urls],{type:'text/plain'});let a=document.createElement('a');a.href=URL.createObjectURL(blob);a.download='javascript_urls.txt';a.click();})();

💡 How to use:
Create a new bookmark in your browser.
Paste the above code into the URL field.
Visit a target site and click the bookmark.
A javascript_urls.txt file will be downloaded with all .js links.

🔥 Now you can feed that into:
LinkFinder
SecretFinder
JSParser
Or manual analysis!

⚡Dependency Confusion via JS Miner

@GodfatherOrwa just landed a clean P1 by leveraging JS Miner in Burp Suite 🔥

Here’s how it went down 👇

🧩 After crawling all endpoints, he went to:
Target ➝ Extensions ➝ JS Miner ➝ Run All Passive Scans

💥 That’s when he spotted: [JS Miner] Dependency Confusion
The vulnerable package was unclaimed on NPM 👀

📦 Next steps he followed:

npm login
mkdir <package-name> && cd <package-name>
npm init -y
npm publish --access public

After claiming the package, he injected an RCE payload via package.json
🧪 Full POC: github.com/orwagodfather/NPM-RCE

💣 Result? A solid P1 vulnerability and a perfect example of how effective Dependency Confusion still is.

Props to @GodfatherOrwa for consistently dropping fire techniques 🔥

🔍 Bug Bounty Web Checklist
✅Track your web pentesting progress by checking each subcategory.
👉https://nemocyberworld.github.io/BugBountyCheckList/

Grab all the GF Patterns from different Repositories at one shot !! 🔥

*Link* : https://github.com/thecybertix/GF-Patterns

✅shosubgo - Small tool to Grab subdomains using Shodan API
⚡https://github.com/incogbyte/shosubgo

Names don’t matter. Bounty does.

✅MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.

⚡https://github.com/midoxnet/mapperplus

🚨 CVE-2025-41646 -
Critical Auth Bypass in RevPi Webstatus (≤ v2.4.5) 🚨
⚠️ Impacts ICS/OT environments – high risk!

🛠️ Root Cause:
Backend uses weak equality comparison, accepting a JSON boolean true instead of a password hash.

🧪 PoC:
Send this in a login request:

{ "hashcode": true }

✅ Result: You get full access without valid credentials!

🔒 Fix: Upgrade to v2.4.6 – patch removes weak comparison logic.

🎯 Bug bounty takeaway:
Always test for type juggling and loose equality bugs in login flows, especially in OT/ICS systems where patch cycles are slower.

CVE-2025-49826: DoS in Next.js, 7.5 rating❗️

A vulnerability in some versions of the Next.js framework allows attackers to perform cache poisoning, leading to a denial of service.

Search at Netlas.io:
👉 Link: https://nt.ls/raJ1k
👉 Dork: http.headers.x_powered_by:"Next.js"

Read more: https://github.com/vercel/next.js/security/advisories/GHSA-67rr-84xm-4c7r