# JSpector | A Simple Burp Suite Extension To Crawl JavaScript (JS) Files

**URL:** <https://onehack.st/t/jspector-a-simple-burp-suite-extension-to-crawl-javascript-js-files/260364>\
**Category:** Tools & Scripts\
**Tags:** tools, gaming, browsers\
**Created:** [October 22, 2023, 11:17pm UTC](https://onehack.st/t/jspector-a-simple-burp-suite-extension-to-crawl-javascript-js-files/260364 "2023-10-22T23:17:06Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Post date:** [October 22, 2023, 11:17pm UTC](https://onehack.st/t/jspector-a-simple-burp-suite-extension-to-crawl-javascript-js-files/260364/1 "2023-10-22T23:17:06Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/1/c/1c0ff0ac042bee4502ea1728b8f869748fb0a308.jpeg)

# [JSpector](https://github.com/hisxo/JSpector#jspector)

JSpector is a Burp Suite extension that passively crawls JavaScript files and automatically creates issues with URLs, endpoints and dangerous methods found on the JS files.

## [Prerequisites](https://github.com/hisxo/JSpector#prerequisites)

Before installing JSpector, you need to have Jython installed on Burp Suite.

## [Installation](https://github.com/hisxo/JSpector#installation)

1. Download [the latest version](https://github.com/hisxo/JSpector/releases) of JSpector
2. Open Burp Suite and navigate to the `Extensions` tab.
3. Click the `Add` button in the `Installed` tab.
4. In the `Extension Details` dialog box, select `Python` as the `Extension Type`.
5. Click the `Select file` button and navigate to the `JSpector.py`.
6. Click the `Next` button.
7. Once the output shows: “JSpector extension loaded successfully”, click the `Close` button.

## [Usage](https://github.com/hisxo/JSpector#usage)

- Just navigate through your targets and JSpector will start passively crawl JS files in the background and automatically returns the results on the `Dashboard` tab.
- You can export all the results to the clipboard (_URLs, endpoints and dangerous methods_) with a right click directly on the JS file:

[![image](https://user-images.githubusercontent.com/16657045/232149174-04d80248-93ff-42d7-8f0b-e0303b3bc289.png)](https://user-images.githubusercontent.com/16657045/232149174-04d80248-93ff-42d7-8f0b-e0303b3bc289.png)

## GitHub:

> **[GitHub - hisxo/JSpector: A simple Burp Suite extension to crawl JavaScript...](https://github.com/hisxo/JSpector)**
>
> A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues