Burp Extension for a passive scanning JS files for endpoint links.
- Export results the text file
- Exclude specific 'js' files e.g. jquery, google-analytics
Copyright (c) 2022 Frans Hendrik Botes
Credit to https://github.com/GerbenJavado/LinkFinder for the idea and regex
I take not responsibility for your use of the software. Development is done in my personal capacity and carry no affiliation to my work.
For use with the professional version of Burp Suite. Ensure you have JPython loaded and setup before installing.
You can modify the exclusion list by updating the strings on line 50. Currently any strings that include the included words will not be analysed.
# Needed params
JSExclusionList = ['jquery', 'google-analytics','gpt.js','modernizr','gtm','fbevents']
Instructions based on the most recent versions of Burp. The following configurations are advised:
- Set target scope under Target --> Scope --> Advance scope --> Keyword
- Set scanners to only scan scoped items e.g. Dashboard --> Live scanner and Live audit set URL Scope to Suite Scope
- Added swing memory management (14/06/2019)
- Added exclusion list on line 33 of code ['jquery', 'google-analytics','gpt.js'] (14/06/2019)
- Added ability to export files (15/06/2019)
- Added filename extracter pane (31/12/2021)
- Added URL mapper, very basic at this time (31/12/2021)
- Minor cosmetic changes on the log for quicker copy paste (31/12/2021)