Skip to content

Instantly share code, notes, and snippets.

@sasqwatch
Forked from dwisiswant0/find js file one liner
Created August 18, 2020 04:57
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sasqwatch/66c29116461a14b1d65e8190ef9ed9f1 to your computer and use it in GitHub Desktop.
Save sasqwatch/66c29116461a14b1d65e8190ef9ed9f1 to your computer and use it in GitHub Desktop.
assetfinder site.com | gau|egrep -v '(.css|.png|.jpeg|.jpg|.svg|.gif|.wolf)'|while read url; do vars=$(curl -s $url | grep -Eo "var [a-zA-Zo-9_]+" |sed -e 's, 'var','"$url"?',g' -e 's/ //g'|grep -v '.js'|sed 's/.*/&=xss/g'):echo -e "\e[1;33m$url\n" "\e[1;32m$vars";done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment