How To Find Dependency Confusion in Modern Web Applications? | Bug Bounty | 2024

[@abduls4479]

First like for my brother

[@BePracticalTech]

Thank you for the support!

[@huzaifamuhammad8044]

You really tried bro Masha Allah

[@BePracticalTech]

@@huzaifamuhammad8044 Thank you!

[@0xkavish]

Video is informative and good , keep it up. One question which cloud service you are using for your vps and kali ?

[@BePracticalTech]

Hostinger

[@gg-mr4qr]

Bro, please make a video for post exploitation. As well as exploit kernel to bypass docker container isolate protection and get full privilege on the main system.

[@SecureByBhavesh]

Informative

[@BePracticalTech]

Glad you liked it!

[@MustafaGains]

But some organizations still configure it to only fetch dependencies from internal source and not allowed to fetch any external dependencies, in this case if we found package.json and it set to private and it mentioned NPM and i go and check if its registered on or not on NPM and i found out its not in this case i will register it with same name , But still idk may the company set the configuration internally to not fetch dependencies externally. This may gonna stop may or am not gonna be sure if i should report it or not may they aware of it and only fetch dependencies internally

[@dittonachan]

Like this video ❤

[@BePracticalTech]

@@dittonachan I am glad!

[@JaiTrades1323]

Nice Content

[@BePracticalTech]

@@JaiTrades1323 Thank you

[@mohammadrezafarahani9287]

Thanks bro but you enter (b) small and that was (B) these are diffrenet together ?

[@BePracticalTech]

@@mohammadrezafarahani9287 They are actually treated as same

[@geniusesml3700]

i only know basics of js can i hunt for dependency confusion what things i should learn ?

[@BePracticalTech]

@@geniusesml3700 Yes! You can hunt for dependency confusion if you know basics of js. I am going to upload a new video on it very soon as well!

[@geniusesml3700]

@@BePracticalTech im waiting bro can u please more videos about this bugs that other don't focus on it's hard but it's worth , than you

[@athul2532]

Can you do dependency confusion via rce video next

[@BePracticalTech]

@@athul2532 Definitely!!