xnl-h4ck3r/xnLinkFinder

to which js file links belongs ?

Closed this issue · 6 comments

molitona commented

Hi, how to know from which js file each of the links in output.txt comes from ?

xnl-h4ck3r commented

Hi @molitona
You need to use the -orig flag. As the help says, you pass this flag if you want the origin of the link to be in the output. It is displayed as LINK-URL [ORIGIN-URL] in the file. Bear in mind that a LINK-URL may be in the file mutiple times because it was found in multiple origins.
Thanks
Xnl
🤘

molitona commented
  • 👍1
molitona commented

what tool do you recommend to find secrets in js files ?

xnl-h4ck3r commented

I asume you mean you have the JS files saved locally? If so, you could use trufflehog. For exmaple, something like:
trufflehog filesystem --directory=~/Where/My/Files/Are

molitona commented
xnl-h4ck3r commented

There is a trufflehog browser extension too that you could use and visit each JS page I guess. Or visit them through Burp and I'm sure there are Burp extensions that will check for secrets