{"repo":"iamshafayat/JSpider","free":true,"listed":false,"github":"https://github.com/iamshafayat/JSpider","clone":"git clone https://github.com/iamshafayat/JSpider.git","description":"JSpider is a smart crawler for hidden endpoints. It crawls and extracts hidden API endpoints and URLs from JavaScript files and HTML source code - all directly in your browser.","language":"JavaScript","stars":18,"topics":["api-scanner","bugbounty","crawler","javascript","pentest-tool","recon","security-tool","source-code-analysis","web-recon","web-security"],"license":"Apache-2.0","category":"scrapers-browser-automation","readme_excerpt":"🕷️ JSpider V2.1 - Advanced JavaScript Crawler & Endpoint Discovery --- The ultimate client-side reconnaissance tool for security researchers. Extract hidden API routes, sensitive parameters, and hardcoded secrets instantly from any website. Built for recon - Fast, lightweight and 100% client-side. --- 🌐 Live 👉 Try JSpider V2.1 now: https://iamshafayat.github.io/JSpider/ --- 🚀 Major Updates (V2.1) JSpider V2.1 expands secret detection and refines the reconnaissance suite with broader pattern coverage and enhanced filtering. ✨ Key Features: - Sensitive Path Prober : Automated checks for 500+ critical paths including .env , .git/config , phpinfo.php , backups, and cloud configurations. Features live response length filtering, instantaneous stop controls, and one-click inspection for 200/403 responses. - Parameter Discovery : Dedicated extraction and grouping of URL parameters to identify potential injection points. - Recursive Discovery Engine : Full website crawling capability (Depth 1) with deep script analysis to find hidden routes. - Precision Secret Detection : High-fidelity regex for 40 patterns including AWS, Google Cloud, Stripe, Slack/Discord Webhooks, JWT, Telegram, Twilio, and more. - High-Fidelity Mapping : Captures raw file paths and absolute URLs without truncation, preserving double slashes and complex structures. - Authentication Headers : Crawl behind login pages inject session cookies or Bearer tokens to scan authenticated dashboards, admin panels, and inte","default_branch":null,"files":null,"tree":[],"storefront":"/r/iamshafayat","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/iamshafayat/JSpider/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}