Projects sharing features with Urlfinder

An IIS short filename enumeration tool

jsleak is a tool to find secret , paths or links in the source code during the recon.

LinkFinder is a security reconnaissance and static analysis tool designed for JavaScript endpoint discovery. It extracts absolute and relative URLs and parameters from JavaScript files to map the attack surface of web applications and identify hidden API routes. The tool operates through static code analysis and regular expression pattern matching to find endpoints without executing the source code. It includes a data processor for importing exported files from Burp Suite, enabling the batch analysis of multiple JavaScript assets in a single execution. The system provides capabilities for do

Find endpoints on GitHub.

Hakrawler is a command-line web spider tool designed for security reconnaissance, built to crawl target websites and extract hyperlinks along with JavaScript file references. As a focused reconnaissance utility, it collects every discoverable URL and script source from a given domain, mapping the attack surface for penetration testing and vulnerability assessment. The tool differentiates itself through its concurrent architecture: a fixed-size goroutine pool fetches pages in parallel, while CSS selectors parse HTML to extract anchor and script references. A depth-aware recursion limiter preve

A golang utility to spider through a website searching for additional links.

Burp Extension for a passive scanning JS files for endpoint links.

Gospider - Fast web spider written in Go

Fetches JavaScript files quickly and comprehensively.

Katana is a web crawler and spider designed for security reconnaissance and web application mapping. It functions as a utility for identifying endpoints, forms, and API structures across web targets by combining standard HTTP request traversal with headless browser automation to render dynamic, JavaScript-heavy content. The tool distinguishes itself through its ability to maintain authenticated sessions and handle complex web interactions, such as automated form submission and captcha resolution. It provides granular control over the discovery process, allowing users to define specific crawl

Reveals invisible links within JavaScript files

A collection of hacks and one-off scripts

A tool to fastly get all javascript sources/files

a .js scanner, built in php. designed to scrape urls and other info

A fast and minimal JS endpoint extractor

Extract (links/possible endpoints) from responses & filter them via decoding/sorting

Extract URLs, paths, secrets, and other interesting bits from JavaScript