How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind each phase.
-
Updated
Jul 5, 2026
How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind each phase.
JavaScript Intelligence Engine - SPA bundle'larindan secret/endpoint/source-map cikartan tek dosya ofansif recon araci. 63 secret regex'i, Source Map V3 dekoderi, webpack chunk parser, multi-format cikti. Bug bounty + self-audit.
A Python-powered reconnaissance tool that hunts exposed secrets, leaked credentials, and sensitive endpoints in web applications.
Fast Frontend JS Static Reconnaissance & Secret/Endpoint Hunter CLI
Parse, explore, and analyze IBM Business Automation Workflow (BAW) TWX applications with dependency mapping and actionable script findings.
NOEMVEX-WEB-ARCHITECT v4.1: Advanced stealth web reconnaissance and API auditing suite. Bypasses WAFs via Exponential Backoff. Automatically decompiles minified JavaScript to extract hardcoded secrets, maps Shadow API routes, and performs active GDPR/PII data leak hunting with Zero-False-Positive JWT validation.
Chrome extension to find vulnerabilities in JavaScript files. Scan live tabs, upload URL lists, or paste/upload single JS files for quick assessment.
To associate your repository with the javascript-analysis topic, visit your repo's landing page and select "manage topics."