Create Your Own custom Wordlists for FUZZING:)

3 years ago 267

BOOK THIS SPACE FOR AD

ARTICLE AD

JavaScript enables dynamic interactivity on websites when it is applied to an HTML document. JavaScript helps the users to build modern web applications to interact directly without reloading the page every time. JavaScript is commonly used to dynamically modify HTML and CSS to update a user interface by the DOM API.

Finding js files using GAU

gau — This tool is great, i usually use it to search for as many javascript files as possible, many companies host their files on third parties, this thing is very for important for a bughunter because then really enumerate a lot js files.

go get -u -v github.com/lc/gau

Install gau using above command, then fuzz for js files using below command,

$ gau target.com |grep -iE '\.js'|grep -ivE '\.json'|sort -u >> targetJS.txt

Thanks for m4ll0k github repo script getJSWords.py

getJSWords.py — get all javascript file words excluding javascript

git clone https://github.com/m4ll0k/BBTz.git

install the bugbounty toolz using above command

$ python3 getjswords.py https://www.target.com/test.jsword
word1
...

then run the python script using above command,

If you interested in digging deeper into JavaScript files,then checkout m4ll0k

gists repo.

That’s all for the article,

THANK YOU:)

Read Entire Article