JSLuice
Extract URLs, secrets, and other interesting data from JavaScript files with pattern matching
Recon & OSINT5 commands
#js#secret#url#extract
Installation
1Install using Go
2Verify installation
# Using Go
go install github.com/BishopFox/jsluice/cmd/jsluice@latest
# Verify
jsluice -hBasic Usage
Analyze JavaScript files for URLs, secrets, and sensitive data
# Analyze a local JS file
jsluice -i script.js
# Analyze from URL
jsluice -u https://example.com/script.js
# Analyze multiple files
jsluice -i script1.js script2.js
# Output as JSON
jsluice -i script.js -j
# Grep mode — search for patterns
jsluice -i script.js -g "api.*key"Command Reference
5 commands
1Input JavaScript file(s)
-i2URL to fetch JS from
-u3JSON output format
-j4Grep mode for custom patterns
-g5Show help message
--helpWhen to Use
1
Finding hardcoded API keys and secrets in JS files2
Extracting all URLs from client-side JavaScript3
Security review of third-party JavaScript4
Bug bounty recon for leaked credentials in JSNotes & Tips
1
Developed by BishopFox — well-maintained security tool2
Uses AST analysis for accurate URL and secret extraction3
Less noisy than simple regex-based approachesCommon Errors & Solutions
Large JS file processing
Increase memory or use -i with smaller chunks
No secrets found
Try with -g flag to search for custom patterns