jsluice
Extracts URLs, paths, and secrets from JavaScript by parsing the AST (not regex) - far more accurate than LinkFinder for modern bundles.
Tags: javascript, endpoints, secrets, ast
- Category
- js
- Maintenance signal
- maintained
Use this when: JavaScript. Read the bundle for endpoints and sinks. A match is not execution.
Install
go
go install github.com/BishopFox/jsluice/cmd/jsluice@latestCommand templates
Extract URLs
cat {input} | jsluice urlsExtract secrets
cat {input} | jsluice secrets