machine1337 / jsscanner

An Efficent tool to find juicy secrets in javascript source code. Automate Your Javascript hunting using this tool.

JSScanner

Prequisite:

Make sure GO language is installed and setup correctly.
or check my recon-automation repo, i have already given command there.

Installation:

1. git clone https://github.com/machine1337/jsrecon   .
2. chmod +x install.sh            .
3. chmod +x jsrecon.sh

Usage:

./jsrecon.sh

Note :

Q: what should my domains.txt look like?.

Ans:

testphp.vulnweb.com  

google.com

Future Feature:

1. Will extract API Key from SecretFinder and save them in seperate file.

2. then will used the API key for authorization.

Tools Used:

SubJs
LinkFinder
SecretFinder
httpx

Special Thanks To:

@tomnomnom   .
other InfoSec Researcher

Author:

{Facebook} (https://facebook.com/unknownclay)
{Twitter}  (https://twitter.com/whoami4041)