Tips and tricks to extrapolate juicy info from JS files
#Crawl endpoint for JS files katana -u targets.txt -d 35 -jc | grep '\.js$' | tee alljs.txt cat targets.txt | gau | grep '\.js$' | anew alljs.txt #Use Hanz0 to recursively check for exposed creds and APIs cat alljs.txt | hanz0 -s high,medium
Last updated 15 days ago