View Issue Details

IDProjectCategoryView StatusLast Update
0009456Kali LinuxNew Tool Requestspublic2026-03-26 10:20
Reportercere23 Assigned Todaniruiz  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionwon't fix 
Summary0009456: jsminer - JavaScript security mining tool
Description

Tool name: jsminer
Tool URL: https://github.com/cereZ23/jsminer
Tool author: Andrea Ceresoni [email protected]
Tool license: GPL-2.0
Tool version: 1.0.0

Description:
JSMiner is a JavaScript security mining tool for bug bounty hunters and penetration testers. It extracts endpoints, API keys, secrets, and sensitive URLs from JavaScript files.

Features:

  • Endpoint extraction (hidden APIs, admin panels, internal routes)
  • Secret detection (40+ patterns: AWS, Stripe, GitHub, JWT, MongoDB, Redis, etc.)
  • URL discovery (internal, staging, dev environments)
  • Async architecture with aiohttp
  • Rich CLI with progress indicators
  • HTML and JSON report generation

    Installation:
    pip install git+https://github.com/cereZ23/jsminer.git

    Usage:
    jsminer -u https://example.com -o report.html
    jsminer -f app.js -o report.json

    Dependencies:
    Python 3.12+, aiohttp, beautifulsoup4, click, rich, pydantic, jinja2, tldextract

    Similar tools: LinkFinder, JSParser, SecretFinder

    Debian packaging included in debian/ directory.

Activities

daniruiz

daniruiz

2026-03-26 10:20

manager   ~0021477

Hello,

Thanks for your submission. We can’t package every infosec tool, so we prioritize those with wider adoption and community usage.

Best of luck with your project.

Issue History

Date Modified Username Field Change
2025-12-19 16:09 cere23 New Issue
2026-03-26 10:20 daniruiz Note Added: 0021477
2026-03-26 10:20 daniruiz Assigned To => daniruiz
2026-03-26 10:20 daniruiz Status new => closed
2026-03-26 10:20 daniruiz Resolution open => won't fix