目录导航
Scripthunter是一种用于查找指定网站的javascript文件的工具。
要扫描Google,只需运行./scripthunter.sh https://google.com
请注意,这可能需要一段时间,因此scripthunter还实现了一种通知机制,以通过Telegram API完成扫描时通知您.

安装方法
要安装scripthunter,请克隆此存储库。Scripthunter依赖于要安装的几个工具,因此请确保您拥有它们:
请确保由于大多数这些工具都是用Go编写的,因此您已正确安装和配置了Go。确保在终端中输入上述任何命令时,它们都可以被识别并起作用。
此外,扫描完成后,scripthunter使用Telegram向您发送通知。要启用此功能,您需要创建一个Telegram 机器人,并将Bot API密钥和chatid粘贴到scripthunter脚本中。您可以按照本指南获取这些值。
特征
- 使用Gau和Hakrawler从网站提取公共javascript文件
- 从找到的公共文件中解析包含js文件的目录
- 使用ffuf和自定义单词列表扫描js目录中的隐藏js文件
- 检查所有找到的文件的连通性
- 扫描完成后通知用户
- 将所有可见的js文件名聚合到一个全局列表中

使用示例
我在一些随机的Verizon子域上运行了此命令:
➜ scripthunter-dev ./scripthunter.sh https://developer.verizonmedia.com/
_ __ __ __
___ ________(_)__ / /_/ / __ _____ / /____ ____
(_-</ __/ __/ / _ \/ __/ _ \/ // / _ \/ __/ -_) __/
/___/\__/_/ /_/ .__/\__/_//_/\_,_/_//_/\__/\__/_/
/_/
by @r0bre
[*] Running GAU
[+] GAU found 7 scripts!
[*] Running hakrawler
[+] HAKRAWLER found 5 scripts!
[*] Found 2 directories containing .js files.
[*] Running FFUF on https://developer.verizonmedia.com/./
[+] FFUF found 0 scripts in https://developer.verizonmedia.com/./ !
[*] Running FFUF on https://developer.verizonmedia.com/assets/
[+] FFUF found 0 scripts in https://developer.verizonmedia.com/assets/ !
[*] Running FFUF on https://developer.verizonmedia.com/assets/js/
[+] FFUF found 0 scripts in https://developer.verizonmedia.com/assets/js/ !
[*] Running FFUF on https://developer.verizonmedia.com/js/
[+] FFUF found 0 scripts in https://developer.verizonmedia.com/js/ !
[*] Running FFUF on https://developer.verizonmedia.com/static/
[+] FFUF found 0 scripts in https://developer.verizonmedia.com/static/ !
[*] Running FFUF on https://developer.verizonmedia.com/static/js/
[+] FFUF found 7 scripts in https://developer.verizonmedia.com/static/js/ !
[*] Running FFUF on https://developer.verizonmedia.com/static/js/vendor/
[+] FFUF found 3 scripts in https://developer.verizonmedia.com/static/js/vendor/ !
[+] Checking Script Responsiveness of 13 scripts..
https://developer.verizonmedia.com/static/js/vendor/js-cookie.js
https://developer.verizonmedia.com/static/js/jquery-3.3.1.min.js
https://developer.verizonmedia.com/static/js/autotrack.js
https://developer.verizonmedia.com/static/js/utils.js
https://developer.verizonmedia.com/static/js/navigation.js
https://developer.verizonmedia.com/static/js/vendor/rapidworker-1.2.js
https://developer.verizonmedia.com/static/js/vmdn.js
https://developer.verizonmedia.com/static/js/right-nav.js
[+] All Done!
[+] Found total of 13 (8 responsive) scripts!
下载地址
①GitHub: https://github.com/robre/scripthunter
②雨苁网盘: w.ddosi.workers.dev