Hacking Articles Tips Tricks Videos Tutorials

Jsleak - A Go Code To Detect Leaks In JS Files Via Regex Patterns

jsleak is a tool to identify sensitive data in JS files through regex patterns. Although it's built for this, you can use it to identify anything as long as you have a regex pattern for it.How to install Directly: {your package manager} install pkg-config libpcre++-devgo get github.com/0xTeles/jsleak/v2/jsleak Compiled: release page How to use Usage of jsleak: -json string + Json output file -pattern string + File contains patterns to test -verbose + Verbose Mode Demo cat urls.txt | jsleak -pattern regex.txt+ Url: http://localhost/index.js+ Pattern: p(a-z+)ch+ Match: peach To Do Fix output Add more patterns Add stdin Implement JSON input Fix patterns Implement PCRE Regex list https://github.com/odomojuli/RegExAPI https://github.com/KaioGomesx/JSScanner/blob/main/regex.txt Inspired by Necessity https://github.com/0x240x23elu/JSScanner https://github.com/KaioGomesx/JSScanner Thanks @fepame, @gustavorobertux, @Jhounx, @arthurair_es Download Jsleak
Read more...

___________________________
@hacking_Attack
@Hacking_Video

5 viewsedited 21:53

Jsleak - A Go Code To Detect Leaks In JS Files Via Regex Patterns
http://www.kitploit.com/2021/08/jsleak-go-code-to-detect-leaks-in-js.html

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Jsleak - A Go Code To Detect Leaks In JS Files Via Regex Patterns

5 viewsedited 22:15

Hacking Articles Tips Tricks Videos Tutorials

5 views22:15

Hacking Articles Tips Tricks Videos Tutorials

jsleak is a tool to identify sensitive data in JS files through regex patterns. Although it's built for this, you can use it to identify anything as long as you have a regex pattern for it.
How to install
Directly: {your package manager} install pkg-config libpcre++-dev
go get github.com/0xTeles/jsleak/v2/jsleak
Compiled: release page (https://github.com/0xTeles/jsleak/releases/tag/jsleak_v2.1)
How to use
Usage of jsleak:
-json string
[+] Json output file
-pattern string
[+] File contains patterns to test
-verbose
[+] Verbose Mode

Demo
cat urls.txt | jsleak -pattern regex.txt
[+] Url: http://localhost/index.js
[+] Pattern: p([a-z]+)ch
[+] Match: peach

To Do
Fix output Add more patterns Add stdin Implement JSON (https://www.kitploit.com/search/label/JSON) input Fix patterns Implement PCRE
Regex list
https://github.com/odomojuli/RegExAPI https://github.com/KaioGomesx/JSScanner/blob/main/regex.txt
Inspired by
Necessity https://github.com/0x240x23elu/JSScanner https://github.com/KaioGomesx/JSScanner
Thanks
@fepame (https://twitter.com/Highustavo), @gustavorobertux (https://twitter.com/gustavorobertux), @Jhounx (https://github.com/Jhounx), @arthurair_es (https://twitter.com/arthurair_es)

Download Jsleak (https://github.com/0xTeles/jsleak)

___________________________
@hacking_Attack
@Hacking_Video

GitHub

Release Compiled version of jsleak v2.1 · 0xTeles/jsleak

Compiled version of jsleak v2.1. What's new?

New output
New argument format
More love

7 viewsedited 22:15

Hacking Articles Tips Tricks Videos Tutorials

xDai Stake Arbitrary Call Method Bug Postmortem

SummaryContinue reading on Immunefi »
Read more...

9 views22:16

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Am I a hacker ?

Hello,

This might sound weird but I incidentally hacked two financial institutions in the last few years and I was wondering if I should consider myself a hacker ?

The first time happened because I usually always keep a dev window open on my browser. I have too many monitors when only browsing so often I'll open an inspect to fill a screen and because I find it funny to see all the errors on websites when browsing. As I logged into the account of a financial institution I work with I noticed some weird unused Javascript that seamed more managerial than user oriented that showed a hidden API. Playing around with postman I started pulling all sorts of information like number of customers etc... I informed the financial institution, they didn't answer but they closed my access to the API and removed the Javascript.

The second time again with a financial institution who I have a contract with for financial services. I wanted to go into my account but must have went in the wrong URL because I ended up in their intranet. Digging around at some point at +-11pm I ended in their SharePoint where I downloaded everything from source code, developer guidelines, server / software lists, some customers claim with all personal info etc. I informed them around midnight, at 5 AM they turned off everything from their website to SharePoint and I got a call requesting information about what I did. I also had sent some of their backend source code in my disclosure email so I guess they really took me seriously.

And I do keep looking at the dev data for sites I visit and dig in when I find weirdness.

So I was wondering if I should consider myself a hacker of sorts ?

I would love your opinions

Thanks

submitted by /u/human8264829264
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Am I a hacker ?

Hello, This might sound weird but I incidentally hacked two financial institutions in the last few years and I was wondering if I should consider...

11 viewsedited 00:33

About

Blog

Apps

Platform