JSKeywordHunter is a powerful open-source tool designed to assist security professionals in identifying potential security vulnerabilities and sensitive information leaks within JavaScript code hosted on websites. This tool automates the process of searching for keywords and patterns that might indicate the presence of sensitive information, such as passwords, API keys, tokens, and other confidential data.
- Linux/OSX machine
- Waybackurls - go install github.com/tomnomnom/waybackurls@latest
- Katana - go install github.com/projectdiscovery/katana/cmd/katana@latest
- GAU - go install github.com/lc/gau/v2/cmd/gau@latest
- URO - pip3 install uro
chmod +x JSKeywordFinder.sh
./JSKeywordFinder.sh website.com
./JSKeywordFinder.sh testphp.vulnweb.com