bug bounty - Blogs @ Jsmon.sh (Page 2)

bugbounty

JS Contextual API Hacking Checklist

APIs are the backbone of modern applications, but they often leak sensitive information through JavaScript files, misconfigurations, and weak security measures. This checklist focuses on API hacking techniques, with special attention to JavaScript file analysis.

bugbounty

Javascript Hacking on CLI for Pentesters (jsmon-cli)

jsmon-cli is a fast and convenient tool (API client) for your JS hacking powered by jsmon.sh. jsmon.sh is a JS security framework made for security enthusiasts, bugbounty hunters, penetration testers

bug bounty

Exploiting Mapbox API Tokens: Unauthorized Usage & Billing Abuse

Mapbox is a powerful mapping platform that offers customizable maps, geocoding, and location-based services through its APIs and SDKs. However, when API tokens lack proper URL restrictions, they become a prime target for abuse. In this research, we

jsmon.sh

S3 Bucket Takeover in H1702 LHE Worth $3000 - BugBounty Writeup

I was sitting on the last day of the H1702 Epic Games event. I've submitted a few bugs to Epic Games and it was the last day, I was not getting any idea on what else to submit. I decided to use my own product jsmon.sh. Collecting