bhattsameer / devtool-snippets-forhacks

Collection of snippets for devtools.

DevTools snippet collection:

TL;DR
List of some cool JS snippets which I have created and found while doing research of client side encryption bypass using devtool only.

Sr. No.	Snippet	Description	Example
1.	consolesave.js	Used for saving console output in a file.	console.save("data");
2.	getCurrentURLHeaders.js	Used for fetching the Current URL Headers in console (table format)	-
3.	developers_mindset.js	Just an example of how monitor() works	-
4.	fuzzit.js	fuzzing encrypted parameter using devtools only	-
5.	fuzz_with_websocket.js	fuzzing encrypted parameters using devtools only with ws:// integration	-
6.	JSEncrypt_fuzz.js	snippet for making JSEncrypt automate	-

How to run above snippets?

1. Open the application in chrome browser.

2. Open inspect element and navigate to source tab -> snippet section.

3. Copy paste the javascript code and execute it.

4. call the snippets methods from console and done.

There is complete series of how to bypass client side encryption and fuzz the encrypted parameters using devtools.

1. client-side-encryption-bypass-part-1
2. client-side-encryption-bypass-part-2
3. client-side-encryption-bypass-part-3

Follow me:

Twitter : @sameer_bhatt
Github : bhattsameer
LinkedIn: bhatt-sameer