How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Extract URLs, paths, secrets, and other interesting bits from JavaScript
The main features of bishopfox/jsluice are: Metadata and File Analysis, Endpoint Discovery, Reconnaissance Tools.
Projects with overlapping indexed features include: tomnomnom/waybackurls — Waybackurls is a command-line OSINT tool that retrieves every known URL for a given domain from the Wayback Machine… lc/gau — Gau is a command-line tool and passive URL enumerator designed to discover and aggregate known and historical web… 003random/getjs — A tool to fastly get all javascript sources/files. gwen001/github-endpoints — Find endpoints on GitHub. gerbenjavado/linkfinder — LinkFinder is a security reconnaissance and static analysis tool designed for JavaScript endpoint discovery. It… xnl-h4ck3r/waymore — Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive &…
LinkFinder is a security reconnaissance and static analysis tool designed for JavaScript endpoint discovery. It extracts absolute and relative URLs and parameters from JavaScript files to map the attack surface of web applications and identify hidden API routes. The tool operates through static code analysis and regular expression pattern matching to find endpoints without executing the source code. It includes a data processor for importing exported files from Burp Suite, enabling the batch analysis of multiple JavaScript assets in a single execution. The system provides capabilities for do
Gau is a command-line tool and passive URL enumerator designed to discover and aggregate known and historical web addresses for specific target domains. It functions as a collection framework that retrieves domain-specific data from public web archives and threat intelligence providers. The tool focuses on passive reconnaissance and open-source intelligence research to map attack surfaces without sending requests directly to target infrastructure. It aggregates data from multiple external sources to identify accessible web endpoints and forgotten pages. The system includes capabilities for r
