Dev, dev, and dev

public
4 min read
Dev, dev, and dev
Photo by Seth Fogelman / Unsplash

Table of contents

I'm currently in Budapest, I just arrived and I'm staying here for only 2 days. I spent only a very short amount of time in each city. It was more to discover Europe and then know where I would like to go again.

Last week was mainly focused on dev. I learned how NextJS works to build my own apps. So it wasn't a lot of hacking stuff.

Hackyx

I rewrote the app with NextJS to add some server features to simply add new content. With that, anyone will be able to add a link with a nice UI.

It will be simpler than making a PR on the repository. I'm also rewriting the whole UI to have a beautiful search bar. It takes a lot of time as I'm not a big fan of CSS but with Tailwind and Shadcn, it's quite easy.

I also added a full dashboard for me and some moderators to moderate all the content that will be added. The aim is to make something semi-automatic, from you that adds a new link, then moderates and finally uses a scraper to get all the content of the page to index it on hackyx.

It's quite a good project, but there are so many new features I wanted to add that it's very time-consuming, and I will need to go back to hunting soon to not be bored of only doing dev stuff.

Huntly

To learn NextJS, I needed a project. I had one a long time ago, and it was to build a dashboard for Bug Hunter. To easily get stats about all bug bounty platforms.

I decided to build it. I'm planning to add some useful functions:

  • Get bounty stats from all the platforms
  • Viewing all the programs with scope, add them to your favorites
  • View all of your reports and get notifications when there is news on them

Here is what it will look like :

I'm planning to release it soon and Open Source. So tell me if you like it or if you have any ideas of what I can add to it.

Developing my own apps

I know that it can be very time-consuming and during this time, I'm not hunting at all. But I still love developing new stuff. And I have plenty of ideas for apps that can help me improve my workflow.

I plan to build something around JS soon, but I don't know if I will open-source it. I also need to get around Caido plugins to build my own and simplify a lot of stuff I'm doing each time.

So If you have any good ideas or you want to collaborate on something tell me.

That wasn't a big post today, my week was quite boring due to a lot of dev stuff and learning NextJS.

Next week, I will be in Istanbul, and I plan to get back to Bug Bounty, with a new way to approach my target that I learned from @fransrosen in the Critical Thinking Podcast :

Episode 45: The OG Bug Bounty King - Frans Rosen
Episode 45: In this episode of Critical Thinking - Bug Bounty Podcast, we’re thrilled to welcome Frans Rosén, an OG bug bounty hunter and co-founder of Detectify. W…

If you did not listen to this one, you have to, it's full of nice information on how he approaches a target.

Ideas / Notes / Resources

  • @Mizu released a new version of his tool DOMLogger++
GitHub - kevin-mizu/domloggerpp
Contribute to kevin-mizu/domloggerpp development by creating an account on GitHub.
  • The article about the recent CVE on pdf.js is released
CVE-2024-4367 - Arbitrary JavaScript execution in PDF.js — Codean Labs
A vulnerability in PDF.js found by Codean Labs. PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This bug allows an attacker to execute arbitrary JavaScript code as soon as a malicious PDF file is opened. This affects all Firefox users (
Aituglo

Aituglo

Paris
The author of this blog, a bug bounty hunter and security researcher that shares his thoughts about the art of hacking.