SecretFinder

Find sensitive data in JS files

Recon & OSINT6 commands

#secret#js#finder#recon#python

Installation

1Clone the repository

2Install Python dependencies

3Verify installation

# Clone the repository
git clone https://github.com/m4ll0k/SecretFinder.git
cd SecretFinder

# Install dependencies
pip install -r requirements.txt

# Verify
python3 SecretFinder.py -h

Basic Usage

Search JavaScript files for secrets, API keys, and tokens

# Scan a single JS file
python3 SecretFinder.py -i https://example.com/script.js -o cli

# Scan with regex input file
python3 SecretFinder.py -i https://example.com/script.js -o cli -r custom_rules.txt

# Scan with grep-like output
python3 SecretFinder.py -i https://example.com/script.js -o html

# Scan without SSL verification
python3 SecretFinder.py -i https://example.com/script.js -o cli --nossl

Command Reference

6 commands

1Input URL or file

-i

2Output format (cli/html/json)

-o

3Custom regex rules file

-r

4Disable SSL verification

--nossl

5Cookies for authentication

-c

6Google dork search

-g

When to Use

Finding API keys and secrets in JavaScript

Reconnaissance on SPA and web applications

Bug bounty recon for exposed credentials

Security audit of JavaScript assets

Finding hardcoded tokens and passwords

Notes & Tips

Uses both regex patterns and entropy analysis

Supports multiple output formats (CLI, HTML, JSON)

Can process local files and remote URLs

Custom regex rules can be added for specific patterns

Designed for bug bounty recon workflows

Common Errors & Solutions

ModuleNotFoundError

Run: pip install -r requirements.txt

No secrets found

Try with custom regex rules or different JS files

SSL certificate error

Use --nossl flag to disable verification

# Scan a single JS file python3 SecretFinder.py -i https://example.com/script.js -o cli # Scan with regex input file python3 SecretFinder.py -i https://example.com/script.js -o cli -r custom_rules.txt # Scan with grep-like output python3 SecretFinder.py -i https://example.com/script.js -o html # Scan without SSL verification python3 SecretFinder.py -i https://example.com/script.js -o cli --nossl