JS file enumeration, four years later: recon with LLMs
Follow-up to my 2022 post: how to collect an SPA's JavaScript, cut it down, and let an LLM read it without burning tokens or trusting a word it says.
#bug-bounty
2 posts
JS file enumeration for bug bounty hunters
Why reading JavaScript files pays off in bug bounty, my workflow for collecting and inspecting them, and two findings that came out of it.