被动JS分析 + 框架识别 + 主动Fuzz + 响应指纹 — 红队API挖掘利器
-
Updated
Aug 19, 2026 - JavaScript
被动JS分析 + 框架识别 + 主动Fuzz + 响应指纹 — 红队API挖掘利器
Monitoring Monster (MonMon) is a monitoring tool for bug bounty hunters. It tracks changes across subdomains, HTTP endpoints, shell command output, and bug bounty program scopes. When something changes, you get alerted on Telegram, Discord and others.
EndpointHunter is a powerful bug bounty tool designed to hunt and extract API endpoints, LFI paths, secrets, and cloud storage URLs from JS, CSS, and HTML files. It's built for efficiency, supporting multi-threaded scanning and seamless integration with other popular recon tools.
Concurrently download JavaScript files from a URL list and fetch their associated .map source maps
Fetching all endpoint in JS files
JavaScript Vulnerability Analyzer
Extract secret from js files
Advanced JavaScript security analysis tool — secret detection, entropy analysis, source maps, GraphQL, WebSockets, tech fingerprinting & HTML reports
⚡ Automated bug bounty reconnaissance pipeline — subdomain enum, live probing, JS mining, vulnerability fingerprinting
Three-pillar reconnaissance suite for JS asset analysis, secret scanning, subdomains and endpoint discovery
To associate your repository with the js-analysis topic, visit your repo's landing page and select "manage topics."