SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files
m4ll0k/secretfinder 的主要功能包括:JavaScript and API Analysis, Reconnaissance Tools, Source Code Analysis, Information Leakage, Secret Scanning。
m4ll0k/secretfinder 的开源替代品包括: gerbenjavado/linkfinder — LinkFinder is a security reconnaissance and static analysis tool designed for JavaScript endpoint discovery. It… ice3man543/subover — A Powerful Subdomain Takeover Tool. edoardottt/cariddi — Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more. devanshbatham/paramspider — Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing. kathanp19/jsfscan.sh — Automation for javascript recon in bug bounty. lc/subjs — Fetches javascript file from a list of URLS or subdomains.
LinkFinder is a security reconnaissance and static analysis tool designed for JavaScript endpoint discovery. It extracts absolute and relative URLs and parameters from JavaScript files to map the attack surface of web applications and identify hidden API routes. The tool operates through static code analysis and regular expression pattern matching to find endpoints without executing the source code. It includes a data processor for importing exported files from Burp Suite, enabling the batch analysis of multiple JavaScript assets in a single execution. The system provides capabilities for do
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing