RB-JSS-Finder (JS String Finder)

JS String Finder is a useful tool for searching specific strings in JavaScript files fetched from a list of URLs. This tool can assist security researchers, developers, and analysts in identifying potential issues or exploring strings present in JS files hosted on various URLs.

Features

• Fetches JS URLs from a file containing a list of JS links.
• Searches for specific strings within the JavaScript content fetched from each URL.
• Displays relevant search results in an easy-to-read format.
• Provides a progress bar to monitor the search process status.

Installation

To run JS String Finder, make sure you have Python 3 installed along with the necessary dependencies. You can install them by running:

git clone https://github.com/rootbakar/JSS-Finder.git

cd JSS-Finder

python3 -m pip install requests beautifulsoup4 tqdm colorama pyfiglet --break-system-packages

or

pip install requests beautifulsoup4 tqdm colorama pyfiglet

Usage

Running the Tool

To use JS String Finder, run the Python script with the following options:

python3 js-string-finder.py -l <path_to_file_with_links> -s <comma_separated_strings_to_search>

Options

• -h, --help: Show the help message and exit.
• -l, --list LIST: Path to the file containing JS links (e.g., js-link.txt).
• -s, --strings STRINGS: Comma-separated strings to search for (e.g., keyword1,keyword2).

Example: Obtaining JS Links

You can combine JS String Finder with jsfinder to automatically fetch JavaScript links from a website. Run the following command to extract the links from a website and store them in a file called js-link.txt:

echo "https://example.com" | jsfinder -read -s -o js-link.txt

or

echo "https://subs.example.com" | jsfinder -read -s -o js-link.txt

cat js-link.txt

First you must installed the jsfinder tools https://github.com/kacakb/jsfinder

Example: Searching for Strings

python3 js-string-finder.py -l js-link.txt -s "Admin"

Example: Convert BurpJSLinkFinder Result

python3 python3 convert.py

Before you run that command, first you must saved the BurpJSLinkFinder to file list-js.txt

Acknowledgement

This tools inspired by jsfinder