vulns.co
/
GKData.io MCP

Back to Workflows

JS recon for endpoints & secrets

Crawl a target, pull JS files, and parse them for hidden endpoints and API routes.

Level: intermediate

Tools: katana, getJS, LinkFinder

Pipeline

katana -u {url} -jc -silent | grep '\.js$' | while read u; do python3 linkfinder.py -i "$u" -o cli; done