KathanP19/JSFScan.sh
Automation for javascript recon in bug bounty. observed · 2026-08-28
Health v2 · maintenance only
32/100
- Activity 0
- Release rhythm 35
- Longevity 100
Flags: no_releases no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 2255
- days_rel: n/a
- days_push: 1089
- n_releases_24m: 0
Adoption not part of the score
1107 stars · 188 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
JSFScan.sh is a shell script that automates JavaScript reconnaissance for bug bounty hunting. Given a list of subdomains, it gathers JS file links, extracts endpoints, variables, and secrets, scans for DOM XSS, builds wordlists, and generates an HTML report.
Use cases
- automate javascript recon for bug bounty
- find secrets in javascript files
- extract endpoints from js files
- scan js files for dom xss
- build wordlists from javascript files
- generate html report of js recon findings
When to choose
- you do bug bounty recon on web targets and want a one-command JS pipeline
- you want to aggregate multiple JS recon tools into a single script
- you want a quick HTML report of endpoints and secrets in JS files
When to avoid
- you need a maintained library or API rather than a shell script
- you are on Windows without WSL or Docker
- you need fine-grained control or modern tooling beyond what the script wraps
Facets
cli-tool · maturity maintenance
web-scraping security workflow-automation developer-tools security penetration-testing web-development cli bug-bounty javascript-recon reconnaissance shell-script dom-xss secrets-detection html-report automation linux macos docker
1 source
- readme: https://github.com/KathanP19/JSFScan.sh · fetched 2026-08-28 · b0ddfecb061e
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| KathanP19/JSFScan.sh | main | 32 |
For agents
markdown · JSON · MCP: product_card(name="KathanP19/JSFScan.sh")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem