This python based tool can be used to discover API keys, access tokens, and other sensitive data in JavaScript files. It can scan JavaScript files in a specified folder, analyze the content using various regex patterns, and output the results either in a CLI format or as an HTML report with highlighted matches.
☆16Oct 18, 2024Updated 2 years ago
Alternatives and similar repositories for JSSecret-Extractor
Users that are interested in JSSecret-Extractor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- [CVE-2024-4956] Nexus Repository Manager 3 Unauthenticated Path Traversal Bulk Scanner☆17Sep 26, 2024Updated 2 years ago
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year
- JScripter is a Python script designed to scrape and save unique JavaScript files from a list of URLs or a single URL.☆30Jun 28, 2026Updated 4 months ago
- List of Directory Traversal/LFI Payloads Scraped from the Internet☆183Feb 10, 2025Updated last year
- Vite Arbitrary File Read Exploit☆16Jun 25, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆46Sep 20, 2024Updated 2 years ago
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆25Jul 13, 2025Updated last year
- OpenRedirector is a powerful automation tool for detecting Open Redirect vulnerabilities in web applications☆21Oct 30, 2025Updated last year
- Springboot detection☆23Nov 8, 2021Updated 4 years ago
- Hand-made Improved Nuclei Templates!🪴☆13Jun 12, 2023Updated 3 years ago
- ☆11Mar 27, 2024Updated 2 years ago
- ☆97Apr 4, 2025Updated last year
- ☆12Dec 8, 2025Updated 10 months ago
- Useful "Match and Replace" & "TLS Pass Through" in Burpsuite Rules☆11Sep 26, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Scanner for Log4j RCE CVE-2021-44228☆11Jul 6, 2022Updated 4 years ago
- ☆10Sep 19, 2021Updated 5 years ago
- CVE-2025-3248 Langflow RCE Exploit☆18Jun 17, 2025Updated last year
- GUI Exploit Tool for CVE-2020-0688(Microsoft Exchange default MachineKeySection deserialize vulnerability)☆16May 9, 2024Updated 2 years ago
- this nuclei template finds back up files☆24Aug 25, 2025Updated last year
- my nuclei templates #new☆10Jun 24, 2024Updated 2 years ago
- Grab form parameters easily☆14Dec 11, 2024Updated last year
- SubOwner - A Simple tool check for subdomain takeovers.☆123Oct 18, 2024Updated 2 years ago
- DomainTrail is a fast subdomain enumeration tool that uses effective passive and active techniques.☆41Apr 18, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Template Nuclei SSTI☆34Nov 18, 2025Updated 11 months ago
- WayAI — Wayback & Common Crawl Recon (CLI + Web GUI)☆13Dec 28, 2025Updated 10 months ago
- Javascript file change monitoring☆23Jun 22, 2026Updated 4 months ago
- Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.☆13Dec 6, 2025Updated 10 months ago
- Crawlex is a powerful Chrome extension designed to assist bug bounty hunters in their work by enabling easy crawling of all possible URLs…☆12May 28, 2023Updated 3 years ago
- Backup Files Wordlist Generator - generate a comprehensive list of potential backup file Wordlist based on a given list URL and backup fi…☆94Jun 23, 2025Updated last year
- ☆52Apr 30, 2026Updated 6 months ago
- N0aziXss Origin Recon 🍓☆24Dec 16, 2025Updated 10 months ago
- Paramix is a command-line tool for modifying the parameters of a list of URLs from stdin and returns them in stdout.☆17Aug 23, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- ☆45Sep 25, 2025Updated last year
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- ☆67Sep 8, 2025Updated last year
- PenTest and BugBounty 🕵️☆17Sep 15, 2026Updated last month
- POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal☆16Nov 26, 2024Updated last year
- ☆17Sep 15, 2023Updated 3 years ago