Sometimes Excel files could contain PII leaks, so use this Google dork:
site:target\.com inurl:'xlsx'
OR
site:target\.com inurl:'xls'

Mastering Burp Suite Pro, 100% hands-on

A quick way to find "all" paths for Next.js websites:

console.log(__BUILD_MANIFEST.sortedPages)

Automating SSRF using Autorepeater 🔒

In this window of Auto-Repeater, we can specify some regex to find urls. In this case, I'll use this regex.

👉 https?:\/\/(www\.)?[-a-zA-Z0–9@:%._\+~#=]{1,256}\.[a-zA-Z0–9()]{1,6}\b([-a-zA-Z0–9()@:%_\+.~#?&//=]*)