JS Recon Buddy users statistics

Analyze page scripts for bug bounty reconnaissance.

The scanner uses a set of regex patterns to identify and categorize potential security-related information:

• Subdomains - discovers related subdomains within the code.
• Endpoints & Paths - uncovers potential API endpoints and other useful paths. For Next.js applications, it also automatically parses (if possible) the build manifest to discover all client-side routes.
• Potential Secrets - scans for API keys, tokens, and other sensitive data using pattern matching and Shannon entropy checks.
• Potential DOM XSS Sinks - identifies dangerous properties and functions like .innerHTML and document.write.
• Interesting Parameters - flags potentially vulnerable URL parameters (e.g., redirect, debug, url).
• Potential Dependency Confusion - (opt-in) identifies private NPM packages that are not on the public registry, flagging a potential dependency confusion attack vector.
• Source Maps - finds links to source maps which can expose original source code. Can optionally guess the location of source maps for discovered JavaScript files even if they aren't explicitly linked.

If it is a valid source map, the extension tries to deconstruct source files based on data there

• JS Libraries - lists identified JavaScript libraries and their versions.
• External and Inline Scripts - provides a complete inventory of all JavaScript sources loaded by the page, allowing you to view the content of any script in a formatted viewer.