
jsluice
Extract URLs, paths, secrets, and other interesting bits from JavaScript

Extract URLs, paths, secrets, and other interesting bits from JavaScript

🕵️ Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded credentials, etc.

「🔑」A tool used to hunt down API key leaks in JS files and pages

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix,…

rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks

Tree-sitter based static vulnerability scanner with pattern matching and taint-flow analysis for multi-language source code. Outputs findings as…

CLI and MCP server that checks package versions for known vulnerabilities across 14+ ecosystems including npm, PyPI, crates.io, Go modules, and…

Passive LLM Conversation Capture & Sensitive Data Exposure Research

Web-based Source Code Vulnerability Scanner

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…

Performing security tests inside your CI

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

Burp Suite extension for JavaScript static analysis: extracts API endpoints, URLs, secrets, and emails with noise filtering for web security testing.

Concurrent CLI tool for discovering secrets, API keys, and links in JavaScript files during web reconnaissance, with custom regex pattern support and…

Go-based tool that scans webpages and JavaScript files to discover hidden subdomains and secrets, with optional crawling and real-time proxy analysis…