Skip to content

Instantly share code, notes, and snippets.

@ipk1
Forked from Spy0x7/find js file one liner
Created September 2, 2020 17:55
Show Gist options
  • Save ipk1/89a194cf5cefd3f1ff14b4317c5d5da0 to your computer and use it in GitHub Desktop.
Save ipk1/89a194cf5cefd3f1ff14b4317c5d5da0 to your computer and use it in GitHub Desktop.
assetfinder site.com | gau|egrep -v '(.css|.png|.jpeg|.jpg|.svg|.gif|.wolf)'|while read url; do vars=$(curl -s $url | grep -Eo "var [a-zA-Zo-9_]+" |sed -e 's, 'var','"$url"?',g' -e 's/ //g'|grep -v '.js'|sed 's/.*/&=xss/g'):echo -e "\e[1;33m$url\n" "\e[1;32m$vars";done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment