Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
JS-Secret-Hunter — Automated Python scanner to detect hardcoded secrets (Private Keys, API Tokens) in client-side JavaScript files. | Kitploit
Tools/GitHubGitHub/sohelyousef/js-secret-hunter
Vulnerability ScannersInformation GatheringWeb SecurityPenetration TestingSecret DetectionCrawler
GitHubsohelyousef/js-secret-hunter

JS-Secret-Hunter

Automated Python scanner to detect hardcoded secrets (Private Keys, API Tokens) in client-side JavaScript files.

View Repository
7 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

JS Secret Hunter V2 🕵️‍♂️

JS Secret Hunter is an advanced Python tool designed for security researchers to automate the detection of hardcoded secrets in client-side JavaScript.

Unlike simple scanners, V2 includes a dynamic crawler that parses the HTML of the target website to extract all loaded JavaScript files automatically, ensuring comprehensive coverage.

Features

  • 🕷️ Dynamic Crawling: Parses HTML to find all <script src> tags automatically.
  • 🔍 Regex-Based Detection: Identifies Private Keys, API Tokens, AWS Keys, and Database credentials.
  • 📂 Hybrid Scanning: Combines dynamic crawling with a dictionary of common sensitive filenames (e.g., config.js).
  • 🛡️ Safe: Passive scanning only.

Installation

root@kitploit:~
git clone [https://github.com/SohelYousef/JS-Secret-Hunter.git](https://github.com/SohelYousef/JS-Secret-Hunter.git)
cd JS-Secret-Hunter
pip install requests beautifulsoup4

## Features
- 🔍 **Regex-Based Detection:** Scans for Ethereum Private Keys, AWS Keys, Google API Keys, and generic tokens.
- ⚡ **Fast Scanning:** Checks common file paths automatically.
- 🛡️ **Safe:** Identifies secrets without exploiting them.

## Installation

```bash
git clone [https://github.com/SohelYousef/JS-Secret-Hunter.git](https://github.com/SohelYousef/JS-Secret-Hunter.git)
cd JS-Secret-Hunter
pip install requests

python3 scanner.py --url [https://target-website.com](https://target-website.com)


Disclaimer
This tool is for educational purposes and authorized security assessments only. The author is not responsible for any misuse.
Download Tool