subjs fetches javascript files from a list of URLS or subdomains. Analyzing javascript files can help you find undocumented endpoints, secrets, and more.
It's recommended to pair this with gau and then linkfinder. Or even gofuzz.
Examples:
$ cat urls.txt | subjs
$ subjs -i urls.txt
$ cat hosts.txt | gau | subjs
To display the help for the tool use the -h
flag:
$ subjs -h
Usage of subjs:
-c int
Number of concurrent workers (default 10)
-i string
Input file containing URLS
-insecure
Skip TLS certificate verification
-t int
Timeout (in seconds) for http client (default 15)
-ua string
User-Agent to send in requests
-version
git clone https://github.com/geeknik/subjs
cd subjs
go build .
go install
subjs -version
Original author: lc