Finding Build Manifests

Assuming you have some means of reading server-side files, these are some examples of places you might look to find build manifests.

Using local file read, we read ../../../../../../../../../proc/self/environ and find the Next.js application is Dockerized.

With most Dockerized applications, the base directory for app files is /app. Thus, .next falls under here.

../../../../../../../app/.next/server/pages-manifest.json

Assuming you're reading ../../../../../../../../app/.next/server/pages-manifest.json, then subsequent file reads would be ../../../../../../../../../app/.next/server/pages/path/to/interesting-page.js.

One such interesting page would be something like /app/.next/server/pages/api/auth/%5B...nextauth%5D.js, which would contain the authentication middleware configuration for an example API.