# JSFScan.sh | Automation For Javascript Recon In Bug Bounty **URL:** \ **Category:** Tools & Scripts\ **Tags:** tools, hacking, freebies\ **Created:** [December 24, 2020, 11:12am UTC](https://onehack.st/t/jsfscan-sh-automation-for-javascript-recon-in-bug-bounty/167290 "2020-12-24T11:12:16Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Post date:** [December 24, 2020, 11:12am UTC](https://onehack.st/t/jsfscan-sh-automation-for-javascript-recon-in-bug-bounty/167290/1 "2020-12-24T11:12:16Z")
![image](https://onehack.st/uploads/default/original/3X/d/7/d7c6a542ad575764f35806158ffef81334b618ad.png) Blog can be found at [https://medium.com/@patelkathan22/beginners-guide-on-how-you-can-use-javascript-in-bugbounty-492f6eb1f9ea?sk=21500dc4288281c7e6ed2315943269e7](https://medium.com/@patelkathan22/beginners-guide-on-how-you-can-use-javascript-in-bugbounty-492f6eb1f9ea?sk=21500dc4288281c7e6ed2315943269e7) Script made for all your javascript recon automation in bugbounty. Just pass subdomain list to it and options according to your preference. **Features** ```auto 1 - Gather Jsfile Links from different sources. 2 - Import File Containing JSUrls 3 - Extract Endpoints from Jsfiles 4 - Find Secrets from Jsfiles 5 - Get Jsfiles store locally for manual analysis 6 - Make a Wordlist from Jsfiles 7 - Extract Variable names from jsfiles for possible XSS. 8 - Scan JsFiles For DomXSS. ``` **Installation** There are two ways of executing this script: Either locally on the host machine or within a Docker container **Installing all dependencies locally** **Note: Make sure you have installed golang properly before running installation script locally.** ```auto $ sudo chmod +x install.sh $ ./install.sh ``` **Building the docker container** When using the docker version, everything will be installed automatically. You just have to execute the following commands: ```auto $ git clone https://github.com/KathanP19/JSFScan.sh $ cd JSFScan/ $ docker build . -t jsfscan ``` In order to start the pre-configured container run the following command: ```auto $ docker run -it jsfscan "/bin/bash" ``` After that an interactive bash session should be opened. **Usage** Target List should be with `https://` and `http://` use httpx or httprobe for this. ```auto https://hackerone.com https://github.com ``` And if you want to add cookie then edit the command at line 23 `cat $target | hakrawler -js -cookie "cookie here" -depth 2 -scope subs -plain >> jsfile_links.txt` **NOTE: If you feel tool is slow just comment out hakrawler line at 23 in JSFScan.sh script , but it might result in little less jsfileslinks.** ```auto _____________ _____________ _ ( _______/_____ ( _______/_____ ) | | _ ( ( _________ ( ( ________ _________ ___| |__ _ | | ____|___ ) ____/___ ( ____| _ /___ | _ | |_| | _____) | |_____) ( ( ___/___ | | | |_|___ | | | | ___/ (______/|_| ( ______/_________ |_| |_(_(___/|_| |_| Usage: -l Gather Js Files Links -f Import File Containing JS Urls -e Gather Endpoints For JSFiles -s Find Secrets For JSFiles -m Fetch Js Files for manual testing -o Make an Output Directory to put all things Together -w Make a wordlist using words from jsfiles -v Extract Vairables from the jsfiles -d Scan for Possible DomXSS from jsfiles ``` [![](https://1.bp.blogspot.com/-fuYpiPYJ_Qs/X8XFXLdmGpI/AAAAAAAAUhI/KIaUH1aP4m8JYE5NsK50pA7p3hqBl0d9ACNcBGAsYHQ/w640-h370/z2DrdjRgVMhr4wF0BhigaF6uN.png)](https://asciinema.org/a/z2DrdjRgVMhr4wF0BhigaF6uN) ## GitHub: > **[GitHub - KathanP19/JSFScan.sh: Automation for javascript recon in bug bounty.](https://github.com/KathanP19/JSFScan.sh)** > > Automation for javascript recon in bug bounty.