JavaScript Hacking Bash Notes

javascript_hacking.sh

#Gather JSFilesUrls

cat $target | gau | grep ".js$" | uniq | sort >> jsfile_links.txt
cat $target | subjs >> jsfile_links.txt
cat jsfile_links.txt | hakcheckurl | grep "200" | cut -d" " -f2 | sort -u > live_jsfile_links.txt

#Gather Endpoints From JsFiles

cat live_jsfile_links.txt | while read url; do python3 ./tools/LinkFinder/linkfinder.py -d -i $url -o cli; done > endpoints.txt

# Find endpoints:

cat endpoints.txt | grep "admin"

#Gather Secrets From Js Files

cat live_jsfile_links.txt | while read url; do python3 ./tools/SecretFinder/SecretFinder.py -i $url -o cli >> jslinksecret.txt ; done

#Collect Js Files For Maually Search

mkdir jsfiles
cp live_jsfile_links.txt ./jsfiles/hosts
cd ./jsfiles/
meg -d 1000 -v /