JS String Finder is a useful tool for searching specific strings in JavaScript files fetched from a list of URLs. This tool can assist security researchers, developers, and analysts in identifying potential issues or exploring strings present in JS files hosted on various URLs.
- Fetches JS URLs from a file containing a list of JS links.
- Searches for specific strings within the JavaScript content fetched from each URL.
- Displays relevant search results in an easy-to-read format.
- Provides a progress bar to monitor the search process status.
To run JS String Finder, make sure you have Python 3 installed along with the necessary dependencies. You can install them by running:
git clone https://github.com/rootbakar/JSS-Finder.git
cd JSS-Finder
python3 -m pip install requests beautifulsoup4 tqdm colorama pyfiglet --break-system-packages
or
pip install requests beautifulsoup4 tqdm colorama pyfiglet
To use JS String Finder, run the Python script with the following options:
python3 js-string-finder.py -l <path_to_file_with_links> -s <comma_separated_strings_to_search>
-h, --help
: Show the help message and exit.-l, --list LIST
: Path to the file containing JS links (e.g.,js-link.txt
).-s, --strings STRINGS
: Comma-separated strings to search for (e.g.,keyword1,keyword2
).
You can combine JS String Finder with jsfinder to automatically fetch JavaScript links from a website. Run the following command to extract the links from a website and store them in a file called js-link.txt
:
echo "https://example.com" | jsfinder -read -s -o js-link.txt
or
echo "https://subs.example.com" | jsfinder -read -s -o js-link.txt
cat js-link.txt
First you must installed the jsfinder tools
https://github.com/kacakb/jsfinder
python3 js-string-finder.py -l js-link.txt -s "Admin"
python3 python3 convert.py
Before you run that command, first you must saved the BurpJSLinkFinder to file list-js.txt
This tools inspired by jsfinder