🤖 LLM-powered agent for automated JS analysis in bug hunting & pentesting.
-
Updated
Apr 29, 2025 - Python
#
javascript-analysis
Here are 13 public repositories matching this topic...
Automated, program-aware bug bounty reconnaissance pipeline utilizing a centralized SQLite database, parallelized execution, continuous JavaScript monitoring, and interactive HTML reporting.
automation regex notifier cybersecurity bug-bounty vulnerability sqlite3 recon regex-pattern automation-framework reconnaissance vulnerability-scanner subdomain-enumeration reconnaissance-framework javascript-analysis bug-bounty-tools project-discovery pattens-matcher regex-patterns-match
-
Updated
Aug 2, 2026 - Python
JavaScript Intelligence Engine - SPA bundle'larindan secret/endpoint/source-map cikartan tek dosya ofansif recon araci. 63 secret regex'i, Source Map V3 dekoderi, webpack chunk parser, multi-format cikti. Bug bounty + self-audit.
webpack python3 bug-bounty web-security pentesting recon offensive-security source-map red-team security-tools api-discovery reconnaissance blue-team information-disclosure credential-scanner javascript-analysis javascript-security bugbounty-tools secret-detection spa-security
-
Updated
May 17, 2026 - Python
A Python-powered reconnaissance tool that hunts exposed secrets, leaked credentials, and sensitive endpoints in web applications.
python injection web-scraping penetration-testing web-security bugbounty vulnerability-scanners security-scanner information-gathering security-tools reconnaissance vulnerability-scanner api-security secrets-detection javascript-analysis api-security-testing web-security-tool vulnerability-scanner-tools
-
Updated
Oct 27, 2026 - Python
Security Assistant Researcher Analyzer
cli helper wordlist analyzer enumeration source-code-analysis headless-browser javascript-analysis crawler-python headers-analysis
-
Updated
Oct 12, 2026 - Python
Fast Frontend JS Static Reconnaissance & Secret/Endpoint Hunter CLI
web-security bugbounty pentest security-tools owasp-top-10 reconnaissance endpoint-discovery javascript-analysis secret-scanner redteam-tool sourcemap-unpacker python-zero-dep
-
Updated
Aug 16, 2026 - Python
NearPath is a lightweight, guided fuzzing tool designed to discover hidden web application endpoints by combining shallow crawling, JavaScript mining, and heuristic path mutation.
python bug-bounty web-security pentesting web-crawling content-discovery reconnaissance cli-tool endpoint-discovery surface-mapping javascript-analysis api-mapping guided-fuzzing heuristic-analysis ethical-testing
-
Updated
Apr 11, 2026 - Python
NOEMVEX-WEB-ARCHITECT v4.1: Advanced stealth web reconnaissance and API auditing suite. Bypasses WAFs via Exponential Backoff. Automatically decompiles minified JavaScript to extract hardcoded secrets, maps Shadow API routes, and performs active GDPR/PII data leak hunting with Zero-False-Positive JWT validation.
bug-bounty offensive-security red-team owasp-top-10 devsecops api-security javascript-analysis shadow-api attack-surface-management gdpr-compliance waf-evasion jwt-validator
-
Updated
Jun 19, 2026 - Python
Open-source web asset scanner and JavaScript bundle analyzer. Inspect HTML/CSS/JS, explore bundles with Webcrack, and use MCP locally.
python open-source mcp static-analysis developer-tools web-security codex javascript-analysis playwright javascript-deobfuscation claude-code bundle-analysis webcrack
-
Updated
Oct 17, 2026 - Python
A highly automated and modular bug bounty reconnaissance toolkit integrating over 15 industry-standard tools for streamlined subdomain enumeration, vulnerability detection, and OSINT gathering. Designed for efficiency, scalability, and precision in real-world security assessments.
automation osint web-scraping cybersecurity owasp-zap vulnerability-scanners bash-scripting continous-integration python-scripting subdomain-enumeration staticwebsite javascript-analysis openai-api api-interaction langchain
-
Updated
Apr 19, 2025 - Python
JScope is a JavaScript analysis and deobfuscation tool designed to help security researchers inspect client-side code, uncover suspicious patterns, and streamline bug bounty reconnaissance. Built for practical web security research, with a focus on understanding JavaScript rather than just cleaning it up. Currently in beta.
javascript python static-analysis javascript-deobfuscator penetration-testing-tools javascript-analysis reverse-engineering-tools
-
Updated
Oct 25, 2026 - Python
Domain attack-surface & static resource discovery tool for subdomains, live hosts, JS files, source maps & API endpoints
-
Updated
Aug 27, 2026 - Python
ReconWeave is an elite, zero-dependency Attack Surface Mapper and Intelligent Web Crawler designed for penetration testers, bug bounty hunters, and security researchers. Built entirely on Python's standard library, it provides deep inspection of web applications, automatic secret detection, and seamless proxy chaining.
python osint web-crawler cybersecurity penetration-testing bug-bounty web-security recon offensive-security web-application-security security-research endpoint-discovery directory-bruteforce secrets-detection javascript-analysis secret-scanning web-reconnaissance osint-tools attack-surface-management attack-surface-mapping
-
Updated
Oct 20, 2026 - Python
Add this topic to your repo
To associate your repository with the javascript-analysis topic, visit your repo's landing page and select "manage topics."