Chapter 1: The Technologies
I will not discuss how to use it since there is a lot of videos on the internet that will guide you forward
Chrome DevTools | Google Developers
Chrome DevTools is a set of web developer tools built directly into the Google Chrome browser. DevTools can help you…
Chapter 3: Understanding ReactJS
React is one of the most successful libraries out there and it’s developed and maintained by Facebook
A pure hello world in React will look like this
Chapter 4: Attacking React.js
A simple hello world from ReactJs will not just include your code it will bundle the whole library code with it. Here is an example of built ReactJS application it’s also the same code that will be served to your browser
We will ignore all the files except main.[hash].js since this is will contain our code. opening it indeed reveals that it’s out hello world code
Chapter 4–1: .map files to the rescue!
- sources are often combined and minified to make delivering them from the server more efficient.
In these situations, it’s much easier to debug the original source, rather than the source in the transformed state that the browser has downloaded. A source map is a file that maps from the transformed source to the original source, enabling the browser to reconstruct the original source and present the reconstructed original in the debugger.
By default, React generates map files and serve them to the browser, most of the developers don’t remove map files from the final build or forget to do so. giving us (as a bug hunters) a way to see and examine the original source code.
Chapter 4–2: Accessing the source code
By using the Chrome DevTools you will notice an orange colored folder appeared containing our original source code, not the minified version
Burp-suite Extension For finding .map files. Contribute to BitTheByte/BitMapper development by creating an account on…
Using this trick will greatly improve the debugging process giving us a way to focus on the important stuff rather than waste time with understanding the minified code