jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
☆504Jan 22, 2026Updated 2 months ago
Alternatives and similar repositories for JShunter
Users that are interested in JShunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆63Feb 22, 2025Updated last year
- A high-performance Go-based tool for checking the availability and responsiveness of domains, utilizing both HTTP requests and browser au…☆92Nov 26, 2024Updated last year
- Zzl is a reconnaissance tool that collects subdomains from SSL certificates in IP ranges☆44Oct 27, 2024Updated last year
- best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect☆1,550Dec 7, 2025Updated 4 months ago
- A passive way to find backups/ sensitive information.☆89Jul 10, 2025Updated 9 months ago
- Serverless GPU API endpoints on Runpod - Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- SubOwner - A Simple tool check for subdomain takeovers.☆116Oct 18, 2024Updated last year
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆92Jan 11, 2025Updated last year
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆563Mar 8, 2025Updated last year
- A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.☆858Jan 5, 2026Updated 3 months ago
- Robofinder retrieves historical #robots.txt files from #Archive.org, allowing you to collect old directories and paths for any domain whi…☆236Nov 21, 2025Updated 4 months ago
- An IIS short filename enumeration tool☆1,139Nov 25, 2024Updated last year
- Automation tool to testing and confirm the xss vulnerability.☆307Jul 18, 2025Updated 8 months ago
- Header Exploitation HTTP☆730Apr 3, 2026Updated last week
- Automate Recon XSS Bug Bounty☆183Mar 9, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- High-Performance JavaScript Security Scanner - Process 1M URLs in ~5 hours with Telegram & Discord bot integration, Docker support, and c…☆172Oct 18, 2025Updated 5 months ago
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆36Updated this week
- Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers☆312Mar 31, 2024Updated 2 years ago
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,830Updated this week
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.☆839Mar 24, 2026Updated 3 weeks ago
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆3,464Feb 10, 2024Updated 2 years ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆313May 16, 2024Updated last year
- ☆38Dec 14, 2024Updated last year
- ☆91Mar 17, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws☆3,965Oct 4, 2025Updated 6 months ago
- Url scrapper or extractor from alienvault☆39Mar 1, 2025Updated last year
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,588Mar 8, 2026Updated last month
- ☆421Mar 26, 2026Updated 2 weeks ago
- AI-powered ffuf wrapper☆711Dec 4, 2025Updated 4 months ago
- Automatic SSTI detection tool with interactive interface☆1,459Mar 22, 2026Updated 3 weeks ago
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆23Jun 28, 2024Updated last year
- ☆13Oct 24, 2024Updated last year
- declutters url lists for crawling/pentesting☆1,544Feb 23, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆506Aug 21, 2025Updated 7 months ago
- i will upload more templates here to share with the comunity.☆569Apr 17, 2024Updated last year
- ☆187Mar 14, 2026Updated last month
- The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbit…☆746Dec 26, 2025Updated 3 months ago
- IDOR Forge is an advanced and versatile tool designed to detect Insecure Direct Object Reference (IDOR) vulnerabilities in web applicatio…☆227Sep 25, 2025Updated 6 months ago
- Burp Plugin to Bypass WAFs through the insertion of Junk Data☆1,465Jul 14, 2025Updated 9 months ago
- how to look for Leaked Credentials !☆1,039May 6, 2024Updated last year