# KathanP19/JSFScan.sh

Automation for javascript recon in bug bounty.

Repository: https://github.com/KathanP19/JSFScan.sh
Canonical: https://ross.abutalabs.com/products/jsfscansh
Language: Shell
License Family: other
Topics: javascript-recon, bugbounty-tool, bugbounty
Last push: 2023-09-09T15:10:22+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2255, "days_push": 1089, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1107, forks 188 (observed 2026-08-28T04:03:36.664699+00:00)

## What it is
JSFScan.sh is a shell script that automates JavaScript reconnaissance for bug bounty hunting. Given a list of subdomains, it gathers JS file links, extracts endpoints, variables, and secrets, scans for DOM XSS, builds wordlists, and generates an HTML report.

## Use cases
- automate javascript recon for bug bounty
- find secrets in javascript files
- extract endpoints from js files
- scan js files for dom xss
- build wordlists from javascript files
- generate html report of js recon findings

## When to choose
- you do bug bounty recon on web targets and want a one-command JS pipeline
- you want to aggregate multiple JS recon tools into a single script
- you want a quick HTML report of endpoints and secrets in JS files

## When to avoid
- you need a maintained library or API rather than a shell script
- you are on Windows without WSL or Docker
- you need fine-grained control or modern tooling beyond what the script wraps

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: web-scraping, security, workflow-automation, developer-tools
- domain: security, penetration-testing, web-development
- platform: cli
- tags: bug-bounty, javascript-recon, reconnaissance, shell-script, dom-xss, secrets-detection, html-report, automation, linux, macos, docker

## Member repositories
- KathanP19/JSFScan.sh (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:36.664699+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:44:00.688230+00:00, confidence not recorded.
  - readme: https://github.com/KathanP19/JSFScan.sh (fetched 2026-08-28T04:03:36.664699+00:00, sha b0ddfecb061e)
- Data as of 2026-08-30T08:39:29.467469+00:00.