jenish-sojitra/JSAnalyzer

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1171 stars · 182 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Burp Suite extension written in Python (Jython) that performs static analysis on JavaScript files proxied through Burp. It extracts API endpoints, URLs, secrets, emails, and sensitive file references with smart noise filtering.

Use cases

• extract api endpoints from javascript files during pentest
• find hardcoded secrets and api keys in js code
• discover hidden admin routes and oauth endpoints
• scan burp http history for leaked credentials
• export discovered endpoints and secrets to json

When to choose

• you already use Burp Suite for web application testing
• you need low-noise endpoint and secret extraction from JS during recon
• you want findings tied back to their source JS files

When to avoid

• you need a standalone CLI scanner outside Burp Suite
• you need dynamic analysis or execution of JavaScript
• your environment cannot run Jython 2.7

Facets

plugin · maturity active

security vulnerability-scanning parser web-scraping security penetration-testing developer-tools web-development python browser-extension burp-suite-extension javascript-analysis secret-scanning endpoint-discovery bug-bounty recon desktop

Member repositories

For agents

markdown · JSON · MCP: product_card(name="jenish-sojitra/JSAnalyzer")