secretfinder

SecretFinder is a python script based on LinkFinder (version for burpsuite here), written to discover sensitive data like apikeys, accesstoken, authorizations, jwt,..etc in JavaScript files. It does so by using jsbeautifier for python in combination with a fairly large regular expression.

Name:secretfinder

Category:Static Code Analysis

Publisher:trickest

Created:6/23/2021

Container:quay.io/trickest/secretfinder:a0283cb

Output Type:

License:Unknown

Source:View Source

Parameters

proxy · string

-pSet proxy (host:port)

cookie · string

-cAdd cookies for authenticated JS files

headers · string

-HSet headers (Name:Value Name:Value)

input-file · file · required

-iInput a file

input-folder · folder · required

-iInput folder

input-string · string · required

-iInput a URL

filtering-regex · string

-rRegEx for filtering purposes against found endpoint. (e.g: ^/api/)

only-process-this · string

-nProcess js url, if it contain the provided string (string;string2..)

ignore-if-contains · string

-gIgnore js url, if it contain the provided string (string;string2..)

extract-all-js-links · boolean

-eExtract all javascript links located in a page and process it

support-burp-exported-file · boolean

-bSupport burp exported file