BSMAPREC is a Burp Suite extension that automatically detects and extracts source maps from JavaScript files. It helps security researchers and developers identify and analyze the original source code of minified JavaScript files.
- 🔍 Automatic detection of source maps in JavaScript files
- 📝 Support for multiple source map formats:
//# sourceMappingURL=//@ sourceMappingURL=/*# sourceMappingURL= */SourceMapandX-SourceMapHTTP headers
- 💾 Save source maps to local filesystem
- 📂 Organized file structure for saved source maps
- 📊 Visual tree view of detected source maps
- 📝 Detailed logging of source map detection and extraction
- 🧹 Clear logs and source maps with dedicated buttons
- Burp Suite Professional or Community Edition
- Java 8 or higher
Tested with java -version
java version "21.0.5" 2024-10-15 LTS
Java(TM) SE Runtime Environment (build 21.0.5+9-LTS-239)
Java HotSpot(TM) 64-Bit Server VM (build 21.0.5+9-LTS-239, mixed mode, sharing)- Download the latest release of BSMAPREC
- Open Burp Suite
- Go to Extender tab
- Click "Add" in the Extensions section
- Select the downloaded JAR file
- The extension will be loaded automatically
- Java 8 or higher
- Maven
- Burp Suite API JAR
-
Clone the repository:
git clone https://github.com/incogbyte/bsmaprec.git cd bsmaprec -
Build the project:
mvn clean package gradle clean build
-
The compiled JAR will be available in the
targetdirectory
-
Automatic Detection: BSMAPREC automatically scans JavaScript files for source maps while you browse or proxy traffic through Burp Suite.
-
Viewing Detected Source Maps:
- Go to the "Collected Source Maps" tab
- The tree view shows all detected source maps and their associated files
- Click on any file to view its details
-
Saving Source Maps:
- Use "Save all" to save all detected source maps
- Use "Save selected" to save only the selected source map
- Use "Change output folder" to specify where to save the files
-
Managing Logs:
- View all detection and extraction logs in the "Logs" tab
- Use "Clear Logs" to reset the log view
When saving source maps, BSMAPREC creates the following structure:
output_directory/
└── path_from_url/
└── source_files/
- incogbyte - @incogbyte
This project is licensed under the MIT License - see the LICENSE file for details.
- Burp Suite @portswigger
- https://github.com/denandz/sourcemapper @denandz
- @S41nt
- Save by domain and list by domain at UI and (saved) folder