Jsleak - A Go Code To Detect Leaks In JS Files Via Regex Patterns

3 years ago 260

BOOK THIS SPACE FOR AD

ARTICLE AD

jsleak is a tool to identify sensitive data in JS files through regex patterns. Although it's built for this, you can use it to identify anything as long as you have a regex pattern for it.

How to install

Directly:

{your package manager} install pkg-config libpcre++-dev
go get github.com/0xTeles/jsleak/v2/jsleak

Compiled: release page

How to use

Usage of jsleak:
-json string
[+] Json output file
-pattern string
[+] File contains patterns to test
-verbose
[+] Verbose Mode

Demo

cat urls.txt | jsleak -pattern regex.txt
[+] Url: http://localhost/index.js
[+] Pattern: p([a-z]+)ch
[+] Match: peach

To Do

Fix output Add more patterns Add stdin Implement JSON input Fix patterns Implement PCRE

Regex list

https://github.com/odomojuli/RegExAPI https://github.com/KaioGomesx/JSScanner/blob/main/regex.txt

Inspired by

Necessity https://github.com/0x240x23elu/JSScanner https://github.com/KaioGomesx/JSScanner

Thanks

@fepame, @gustavorobertux, @Jhounx, @arthurair_es

Jsleak - A Go Code To Detect Leaks In JS Files Via Regex Patterns Reviewed by Zion3R on 5:30 PM Rating: 5

Read Entire Article