XEXEVIL

[XEXEVIL @XEXEVIL]

#cool_research From Zero Credentials to Super Admin: An SSO Authentication Bypass on AT&T

https://t.co/yRPgcJr242

[XEXEVIL @XEXEVIL]

@DuckyWantDucky can you speak about 'daily learning path'?

[VIEH Group @viehgroup]

Use NextJS? Recon ✨

A quick way to find "all" paths for Next.js websites:
DevTools->Console

console.log(__BUILD_MANIFEST.sortedPages)

javascript​:console.log(__BUILD_MANIFEST.sortedPages.join('\n'));

Credit: @ofjaaah

#infosec #bugbountytips #bugbounty

[XEXEVIL @XEXEVIL]

@iyoushetwt JS ∞3>