# jenish-sojitra/JSAnalyzer

Repository: https://github.com/jenish-sojitra/JSAnalyzer
Canonical: https://ross.abutalabs.com/products/jsanalyzer
Language: Python
License: MIT
License Family: permissive
Last push: 2026-01-28T19:24:55+00:00

## Health v2 (maintenance only)
Score: 44/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 64, release rhythm 35, longevity 17
- inputs: {"age_days": 242, "days_push": 217, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1171, forks 182 (observed 2026-08-28T04:03:51.628299+00:00)

## What it is
A Burp Suite extension written in Python (Jython) that performs static analysis on JavaScript files proxied through Burp. It extracts API endpoints, URLs, secrets, emails, and sensitive file references with smart noise filtering.

## Use cases
- extract api endpoints from javascript files during pentest
- find hardcoded secrets and api keys in js code
- discover hidden admin routes and oauth endpoints
- scan burp http history for leaked credentials
- export discovered endpoints and secrets to json

## When to choose
- you already use Burp Suite for web application testing
- you need low-noise endpoint and secret extraction from JS during recon
- you want findings tied back to their source JS files

## When to avoid
- you need a standalone CLI scanner outside Burp Suite
- you need dynamic analysis or execution of JavaScript
- your environment cannot run Jython 2.7

## Facets
- artifact type: plugin
- maturity: active
- function: security, vulnerability-scanning, parser, web-scraping
- domain: security, penetration-testing, developer-tools, web-development
- platform: python, browser-extension
- tags: burp-suite-extension, javascript-analysis, secret-scanning, endpoint-discovery, bug-bounty, recon, desktop

## Member repositories
- jenish-sojitra/JSAnalyzer (main) score 44

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:51.628299+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:28:31.895959+00:00, confidence not recorded.
  - readme: https://github.com/jenish-sojitra/JSAnalyzer (fetched 2026-08-28T04:03:51.628299+00:00, sha 1fd14c7612a6)
- Data as of 2026-08-30T08:39:29.467469+00:00.