aashishsec / js.scanner

Give list of JS file URLs to find Sensitive Files like API keys, Emails, Phone No, URLs etc.....

JS Code Scanner

Tool link

Introduction

• JSScanner is a Python tool that uses Selenium to scan JavaScript files for sensitive information.

• It reads a list of JavaScript file URLs, loads each URL in a headless Firefox browser, extracts the JavaScript code, and searches for predefined patterns indicative of sensitive information using regular expressions.

• Works in all platforms.

Features

• Scans JavaScript files for sensitive data.

• Supports the detection of API keys, credentials, personal data, tokens, and URLs.

• Headless browser mode for improved performance.

Installation

• Clone the repository to your local machine.

• Install the required dependencies using pip: pip install -r requirements.txt.

• Download the latest version of the Firefox WebDriver from here and add it to your PATH environment variable.

git clone https://github.com/aashish36/JSScanner.git

cd JSScanner

pip install -r requirements.txt

Usage

• Create a file containing the list of URLs to scan, with one URL per line.file.txt should contain all js urls.

• The script will output the results of the analysis to a file named 'output.txt'.

• Run the script using the following command:

python3 JS-scanner.py path/to/url/file.txt

Contributing

• Contributions are welcome! If you have any suggestions, bug reports, or feature requests, please open an issue or submit a pull request.

js.scanner's Issues

how to fix the error?

When I run the script I get the error:
File "/opt/JS/JSScanner/JS-scanner.py", line 184
s_key|cloudant_password|cloudflare_api_key|cloudflare_auth_key|cloudinary_api_secret|cloudinary_name|codecov_token|config|conn.login|connectionstring|consumer_key|consumer_secret|credentials|cypress_record_key|database_password|database_schema_test|datadog_api_key|datadog_app_key|db_password|db_server|db_username|dbpasswd|dbpassword|dbuser|deploy_password|digitalocean_ssh_key_body|digitalocean_ssh_key_ids|docker_hub_password|docker_key|docker_pass|docker_passwd|docker_password|dockerhub_password|dockerhubpassword|dot-files|dotfiles|droplet_travis_password|dynamoaccesskeyid|dynamosecretaccesskey|elastica_host|elastica_port|elasticsearch_password|encryption_key|encryption_password|env.heroku_api_key|env.sonatype_password|eureka.awssecretkey)[a-z0-9_ .-,]{0,25})(=|>|:=|||:|<=|=>|:).{0,5}'"['"]')
^
SyntaxError: unexpected character after line continuation character