jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
☆544Sep 20, 2026Updated last month
Alternatives and similar repositories for JShunter
Users that are interested in JShunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆61Feb 22, 2025Updated last year
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆567Mar 8, 2025Updated last year
- High-Performance JavaScript Security Scanner - Process 1M URLs in ~5 hours with Telegram & Discord bot integration, Docker support, and c…☆174Oct 18, 2025Updated last year
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆93Jan 11, 2025Updated last year
- best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect☆1,618Dec 7, 2025Updated 10 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibrati…☆1,916Updated this week
- A passive way to find backups/ sensitive information.☆96Jul 10, 2025Updated last year
- Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets☆147Jan 21, 2025Updated last year
- An IIS short filename enumeration tool☆1,234Nov 25, 2024Updated last year
- A high-performance Go-based tool for checking the availability and responsiveness of domains, utilizing both HTTP requests and browser au…☆93Nov 26, 2024Updated last year
- A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.☆921Updated this week
- Zzl is a reconnaissance tool that collects subdomains from SSL certificates in IP ranges☆43Oct 27, 2024Updated 2 years ago
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,787Jun 11, 2026Updated 4 months ago
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws☆4,087Oct 4, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Automation tool to testing and confirm the xss vulnerability.☆308Jul 18, 2025Updated last year
- Orbis is an full spectrum automated external attack surface intelligent toolkit.☆414Aug 12, 2026Updated 2 months ago
- declutters url lists for crawling/pentesting☆1,600Feb 23, 2025Updated last year
- Header Exploitation HTTP☆766Sep 6, 2026Updated last month
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,864Apr 17, 2026Updated 6 months ago
- ☆1,182Jan 28, 2026Updated 9 months ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆312May 16, 2024Updated 2 years ago
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.☆881Updated this week
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆3,657Feb 10, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,599Mar 8, 2026Updated 7 months ago
- List of Directory Traversal/LFI Payloads Scraped from the Internet☆183Feb 10, 2025Updated last year
- A simple browser extension to quickly find interesting security-related information on a webpage.☆191Updated this week
- Go scanner to find web cache poisoning vulnerabilities in a list of URLs☆149Feb 21, 2024Updated 2 years ago
- how to look for Leaked Credentials !☆1,176May 6, 2024Updated 2 years ago
- This is a python wrapper around the amazing KNOXSS API by Brute Logic☆285Mar 6, 2026Updated 7 months ago
- SubOwner - A Simple tool check for subdomain takeovers.☆123Oct 18, 2024Updated 2 years ago
- AI-powered ffuf wrapper☆813Dec 4, 2025Updated 11 months ago
- Automate Recon XSS Bug Bounty☆195Mar 9, 2026Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Automatic SSTI detection tool with interactive interface☆1,723Aug 25, 2026Updated 2 months ago
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆37Apr 9, 2026Updated 6 months ago
- SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty☆813Oct 7, 2026Updated 3 weeks ago
- ☆195Mar 14, 2026Updated 7 months ago
- Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers☆312Mar 31, 2024Updated 2 years ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆1,109Aug 5, 2026Updated 2 months ago
- AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories,☆748Mar 21, 2024Updated 2 years ago