View Issue Details

IDProjectCategoryView StatusLast Update
0006510Kali LinuxQueued Tool Additionpublic2020-06-28 09:59
Reporterg0tmi1k Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status acknowledgedResolutionopen 
Summary0006510: LinkFinder - finds endpoints in JavaScript files
Description

[Name] - LinkFinder
[Homepage] - https://gerbenjavado.com/discovering-hidden-content-using-linkfinder/
[Download] - https://github.com/GerbenJavado/LinkFinder/releases
[Version] - N/A
[Author] - GerbenJavado
[License] - MIT
[Dependencies] - jsbeautifier
[Description] - A python script that finds endpoints in JavaScript files

LinkFinder is a python script written to discover endpoints and their parameters in JavaScript files. This way penetration testers and bug hunters are able to gather new, hidden endpoints on the websites they are testing. Resulting in new testing ground, possibility containing new vulnerabilities. It does so by using jsbeautifier for python in combination with a fairly large regular expression. The regular expressions consists of four small regular expressions. These are responsible for finding:

Full URLs (https://example.com/)
Absolute URLs or dotted URLs (/* or ../
)
Relative URLs with at least one slash (text/test.php)
Relative URLs without a slash (test.php)

Activities

g0tmi1k

g0tmi1k

2020-06-28 09:58

administrator   ~0013013

@kali-team, please could this be packaged up.

Issue History

Date Modified Username Field Change
2020-06-22 16:31 g0tmi1k New Issue
2020-06-28 09:58 g0tmi1k Status new => acknowledged
2020-06-28 09:58 g0tmi1k Note Added: 0013013
2020-06-28 09:59 g0tmi1k Category New Tool Requests => Queued Tool Addition