SecretHunter-JS

A Python security reconnaissance tool to discover JavaScript files, sensitive secrets, and API endpoints in web applications.

Features

• JavaScript Discovery: Extract and locate JS files from target web applications.
• Secret Scanner: Scan files for exposed API keys, credentials, tokens, and sensitive strings using robust regular expressions.
• Endpoint Extraction: Discover and resolve hidden API routes, paths, and endpoints embedded within scripts, including live HTTP status code verification.
• Lightweight & Fast: Built with clean, minimalist Python code for efficiency.

Prerequisites

Ensure you have Python installed on your system. The tool requires the following Python libraries:

• requests
• beautifulsoup4

Disclaimer

This tool is created for educational purposes, authorized security assessments, and Bug Bounty programs only. The developer assumes no liability and is not responsible for any misuse or damage caused by this program. Use responsibly and only on targets you have explicit permission to test.