Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/0xTeles/jsleak
a Go code to detect leaks in JS files via regex patterns
https://github.com/0xTeles/jsleak
bugbounty golang scanner security
Last synced: 3 months ago
JSON representation
a Go code to detect leaks in JS files via regex patterns
- Host: GitHub
- URL: https://github.com/0xTeles/jsleak
- Owner: 0xTeles
- License: mit
- Created: 2021-08-01T14:48:49.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2021-10-20T02:38:34.000Z (about 3 years ago)
- Last Synced: 2024-06-18T21:46:26.316Z (5 months ago)
- Topics: bugbounty, golang, scanner, security
- Language: Go
- Homepage:
- Size: 59.6 KB
- Stars: 139
- Watchers: 2
- Forks: 26
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-hacking-lists - 0xTeles/jsleak - a Go code to detect leaks in JS files via regex patterns (Go)
README
# jsleak
jsleak is a tool to identify sensitive data in JS files through regex patterns. Although it's built for this, you can use it to identify anything as long as you have a regex pattern for it.
### How to install
Directly:
```
{your package manager} install pkg-config libpcre++-dev
go get github.com/0xTeles/jsleak/v2/jsleak
```
Compiled: [release page](https://github.com/0xTeles/jsleak/releases/tag/jsleak_v2.1)
### How to use
```
-json string
[+] Json output file
-pattern string
[+] File contains patterns to test
-timeout int
[+] Timeout for request in seconds (default 5)
-verbose
[+] Verbose Mode
```
### Demo
```
cat urls.txt | jsleak -pattern regex.txt
[+] Url: http://localhost/index.js
[+] Pattern: p([a-z]+)ch
[+] Match: peach
```
### Regex list
- https://github.com/odomojuli/RegExAPI
- https://github.com/KaioGomesx/JSScanner/blob/main/regex.txt
### Inspired by
- Necessity
- https://github.com/0x240x23elu/JSScanner
- https://github.com/KaioGomesx/JSScanner
### Thanks
[@fepame](https://twitter.com/Highustavo), [@gustavorobertux](https://twitter.com/gustavorobertux), [@Jhounx](https://github.com/Jhounx), [@arthurair_es](https://twitter.com/arthurair_es), [@le0nard01](https://github.com/le0nard01)