JSRecon is a lightweight JavaScript reconnaissance tool written in Go for discovering sensitive endpoints, API paths, and hidden secrets from JavaScript files.
- Parses JavaScript files from target URLs
- Extracts endpoints, API keys, and hidden paths
- Fast concurrent scanning using Go routines
- CLI-based for automation workflows
-
Download Go from the official website:
https://go.dev/dl/ -
Download the Windows amd64 installer (.msi).
-
Run the installer and follow the default setup steps.
-
Restart your terminal (PowerShell or CMD).
-
Verify installation:
-
Check - go version
sudo apt update
sudo apt install -y golang
go versionTo install and run the tool, follow these steps:
-
Clone the repository:
git clone https://github.com/FD785/jsrecon.git
-
Navigate to the project directory:
cd jsrecon -
Install the dependencies:
go mod tidy
-
Run the tool:
go run cmd/jsrecon/main.go urls.txt
Now you are good to go! ๐