endext

EndExt EndExt is a .go tool for extracting all the possible endpoints from the JS files Idea When you crawll all the JS files from waybackruls for example, or even collecting the JS files urls from your target website's home source page .. If the website was using API system and you wanna look fo...

Burp_Collector

Burp Collector Burp Collector is a multi-processing tool that is specifically designed to aid Pentesters and Bug Hunters in Web/Mobile Application testing. With its powerful capabilities, it streamlines the process of collecting and extracting information from Burp Suite files, empowering you to...

ParaForge

ParaForge ParaForge is a simple Burp Suite extension to extract the paramters and endpoints from the request to create custom wordlist for fuzzing and enumeration. This is just a simple extension for easy usage. There are more advance and better options available. Features Extract endpoint Extrac...

graphicator

Graphicator Graphicator는 GraphQL "스크래퍼"/추출기입니다. 이 도구는 대상 GraphQL 엔드포인트에서 반환된 인트로스펙션 문서를 반복 처리한 다음, 스키마를 내부 형식으로 재구성하여 지원되는 쿼리를 재생성할 수 있도록 합니다. 이러한 쿼리가 생성되면 이를 사용하여 엔드포인트에 요청을 보내고 반환된 응답을 파일에 저장합니다. 오류 응답은 저장되지 않습니다. 기본적으로 이 도구는 올바른 응답을 캐시하고 오류도 캐시하므로, 도구를 다시 실행할 때 동일한 쿼리를 다시 실행하지 않습니다. 현명하게 사용하고,...

wordlistgen

wordlistgen Generates target specific word lists by searching for endpoints in javascript and appends parameters for Fuzzing with other tools Version 1.0 Install $ go get -u github.com/ethicalhackingplayground/wordlistgen $ go get github.com/003random/getJS Generate wordlist $ echo...

JSFScan.sh

JSFScan.sh Blog can be found at https://medium.com/@patelkathan22/beginners-guide-on-how-you-can-use-javascript-in-bugbounty-492f6eb1f9ea?sk=21500dc4288281c7e6ed2315943269e7 Script made for all your javascript recon automation in bugbounty. Just pass subdomain list to it and options according to...

GWTMap

Description GWTMap is a tool to help map the attack surface of Google Web Toolkit GWT based applications. The purpose of this tool is to facilitate the extraction of any service method endpoints buried within a modern GWT application's obfuscated client-side code, and attempt to generate example...