JS Recon Extractor v1.1.0

JS Recon Extractor v1.1.0

Passive browser extension (Manifest V3) for authorized recon: scans page JS, source maps, endpoints, subdomains, and secrets.

Highlights

• Inline + external JS (incl. scripts removed from DOM), source-map mining
• SPA-aware rescanning (MutationObserver + pushState detection)
• Findings persist per-host in storage; severity triage + high-risk flags
• Manual read-only secret verification (GitHub, Slack, Stripe, Mailgun, Discord, Telegram, OpenAI)
• Severity filter chips, copy-to-clipboard, JSON/TXT/Markdown export
• Cross-browser (Chrome + Firefox); scope configuration via options page

Packages

• chrome/ folder ? js-recon-extractor-chrome-1.1.0.zip
• firefox/ folder ? js-recon-extractor-firefox-1.1.0.zip and .xpi (unsigned; install temporary via about:debugging, or sign via addons.mozilla.org for permanent install)

For authorized security research and testing only.