Omar

[VIEH Group @viehgroup]

Use NextJS? Recon ✨

A quick way to find "all" paths for Next.js websites:
DevTools->Console

console.log(__BUILD_MANIFEST.sortedPages)

javascript​:console.log(__BUILD_MANIFEST.sortedPages.join('\n'));

Credit: @ofjaaah

#infosec #bugbountytips #bugbounty

[Omar @PixelatedOmar]

@m19o__

[Omar @PixelatedOmar]

@just7ossam @d3doxp

[Omar @PixelatedOmar]

@sudosheggs @Hacker0x01 thanks

[Omar @PixelatedOmar]

Yay, I was awarded a $400 bounty on @Hacker0x01! https://t.co/ZJIICsQAG2 #TogetherWeHitHarder #bugbounty

[Omar @PixelatedOmar]

@DuckyWantDucky @Hacker0x01 thanks

[Omar @PixelatedOmar]

@sarvesht25 @Hacker0x01 thanks

[Omar @PixelatedOmar]

باعت ميل ومكبر الموضوع ليه يسطا متكرمشهم في ايدي يعم وخلاص

[Omar @PixelatedOmar]

Burn the plan, adapt on the fly

[Omar @PixelatedOmar]

صباح العيد كلكم تعيدون ومجتمعين
خويك البج هانتر:

[Patrik Grobshäuser @ITSecurityguard]

"Worst she can say is no"

Her:

[Abdallah @d3doxp]

In this write-up, I detail how I escalated info/P4 into P1 and avoided brute-force 36^11 for UUIDs by exploiting typical human behavior.

https://t.co/C2qAUB14iZ