Skip to content

JSHawk v1.1 - Source Map Support

Latest
Latest

Choose a tag to compare

View all tags
@Mah3Sec Mah3Sec released this 11 Sep 18:09
· 10 commits to main since this release
v1.1
2f507f8
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

馃殌 Major Update: Source Map Support Added

New Features

  • Source Map Discovery: Automatically finds .js.map files for every JavaScript file
  • Inline Source Map Extraction: Decodes base64 encoded source maps from JS files
  • Enhanced Analysis: Analyzes original unminified source code for better secret detection
  • Improved Patterns: Fixed regex syntax errors and enhanced credential detection

Why This Matters

Source maps often contain MORE secrets than minified JavaScript files:

  • Original variable names instead of minified a, b, c
  • Developer comments with TODOs and credentials
  • Readable code structure for better pattern matching
  • Internal API endpoints and configurations

Breaking Changes

None - fully backward compatible with v1.0

Installation

# Download latest version
curl -L https://github.com/Mah3Sec/JSHawk/releases/download/v1.1/JSHawk.sh -o JSHawk.sh
chmod +x JSHawk.sh

# Or update existing installation
wget https://github.com/Mah3Sec/JSHawk/releases/latest/download/JSHawk.sh -O JSHawk.sh
Assets 2
Loading