被动JS分析 + 框架识别 + 主动Fuzz + 响应指纹 — 红队API挖掘利器
-
Updated
Aug 19, 2026 - JavaScript
被动JS分析 + 框架识别 + 主动Fuzz + 响应指纹 — 红队API挖掘利器
Monitoring Monster (MonMon) is a monitoring tool for bug bounty hunters. It tracks changes across subdomains, HTTP endpoints, shell command output, and bug bounty program scopes. When something changes, you get alerted on Telegram, Discord and others.
EndpointHunter is a powerful bug bounty tool designed to hunt and extract API endpoints, LFI paths, secrets, and cloud storage URLs from JS, CSS, and HTML files. It's built for efficiency, supporting multi-threaded scanning and seamless integration with other popular recon tools.
Concurrently download JavaScript files from a URL list and fetch their associated .map source maps
JavaScript Vulnerability Analyzer
Fetching all endpoint in JS files
Extract secret from js files
Advanced JavaScript security analysis tool — secret detection, entropy analysis, source maps, GraphQL, WebSockets, tech fingerprinting & HTML reports
Three-pillar reconnaissance suite for JS asset analysis, secret scanning, subdomains and endpoint discovery
⚡ Automated bug bounty reconnaissance pipeline — subdomain enum, live probing, JS mining, vulnerability fingerprinting
Add a description, image, and links to the js-analysis topic page so that developers can more easily learn about it.
To associate your repository with the js-analysis topic, visit your repo's landing page and select "manage topics."