JSProbeX
Pentesting tool to extract secrets & URLs from JS files
JSProbeX launched on December 28, 2024 with 8 votes and more than 50% of that year's launches. The site was still online in September 2026, 1 year on.
What it does
Penetration testing tool that extracts sensitive information such as API keys, secret tokens, and URLs from JavaScript files. It helps penetration testers and bug bounty hunters efficiently identify exposed credentials and security risks in JS files and URLs.
JSProbeX is a Python-based tool designed to extract sensitive information such as API keys, secret tokens, and URLs from JavaScript files. Ideal for penetration testers and bug bounty hunters, it efficiently scans JS files and URLs to identify potential security risks and exposed credentials. - hackelite01/JSProbeX
JSProbeX is a Python-based tool for extracting URLs and sensitive secrets from JavaScript files. This tool helps you scan multiple URLs or files for sensitive information like API keys, secret tokens, and more. It is ideal for penetration testers and bug bounty hunters who need to efficiently analyze JavaScript files and identify valuable data. git clone https://github.com/hackelite01/JSProbeX.git Install the required dependencies : python jsprobex.py -u < URL > For multiple URLs from a file : python jsprobex.py -f < file.txt > To extract secrets from URL : python jsprobex.py -u < URL > --secrets To extract secrets from file : python jsprobex.py -f < file.txt > --secrets To specify output…from github.com
Does a similar job
all alternatives →
Osint tool that finds exposed files on domainsJul 2026 · search.cerast-intelligence.com · ▲58hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Socket – Secure your JavaScript supply chain2022 · socket.dev · ▲133Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
BrowserTotal: A framework for analyzing browser security posture2025 · browsertotal.com · ▲28Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…
I built a tool that detects bad cases of the Log4j vulnerability2021 · log4shell.tools · ▲19Free defensive Log4Shell tools. Scan logs for CVE-2021-44228 JNDI exploitation attempts (including obfuscated payloads) and check whether a Log4j version is vulnerable.
- WTWeb tool which spits out hardcoded secret API tokens in apps2016 · android.fallible.co · ▲24
More dev tools this month
the category →
Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.
Dev tools · 2d ago · github.com
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 29d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 27d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 25d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 22d ago · talanoa.email
Source: Product Hunt launch ↗
