JSAnalyzer: Burp Suite Extension for JavaScript Static Analysis and Security Testing
By
handfuloflight
Baker's choice. Dense with flavour, light on filler.
Summary
JSAnalyzer is a Burp Suite extension for JavaScript static analysis that extracts API endpoints, URLs, secrets, and email addresses from JavaScript files with intelligent noise filtering. The tool aims to reduce noise to ensure accuracy and includes features for endpoint detection, URL extraction, secret scanning, and email extraction. It's available as a GitHub repository for developers to contribute to and use in security testing workflows.
Key quotes
· 5 pulledA powerful Burp Suite extension for JavaScript static analysis
Extracts API endpoints, URLs, secrets, and email addresses from JavaScript files with intelligent noise filtering
The goal is reduce noise as much as possible to ensure the accuracy
Endpoint Detection - Finds API paths, REST endpoints, OAuth URLs, admin routes
Secret Scanning - Detects API keys, tokens, credentials (AWS, Stripe, GitHub, Slack, JWT, etc.)
You might also wanna read
Rust Programming Language Faces Inevitable Supply Chain Security Threats
The article warns about inevitable supply chain attacks targeting the Rust programming language ecosystem, predicting that malicious actors
kerkour.com·1mo ago
Astral's Security Practices for Open Source Developer Tools
Astral, a company that builds developer tools, shares its security practices in response to growing concerns about supply chain attacks. The
astral.sh·1mo ago
Real-Time Investigation of LiteLLM 1.82.8 PyPI Supply Chain Attack on March 24, 2026
This article documents a real-time investigation and response to the LiteLLM 1.82.8 supply chain attack on March 24, 2026. It presents a min
futuresearch.ai·2mo ago
NanoClaw Adopts OneCLI Agent Vault for Enhanced Security and Credential Management
NanoClaw is adopting OneCLI's Agent Vault as its default credential and proxying layer, replacing its previous credential proxy system. The
nanoclaw.dev·2mo ago
Trivy GitHub Actions Compromised in Supply Chain Attack, Exposing CI/CD Secrets
A new supply chain attack targeting Trivy's GitHub Actions has been disclosed, where attackers compromised the security scanner by force-upd
socket.dev·2mo ago
GitHub Issue Prompt Injection Leads to 4,000 Developer Machines Compromised via Malicious npm Package
A sophisticated supply chain attack compromised approximately 4,000 developer machines through a GitHub issue title prompt injection. The at
grith.ai·2mo ago