subjs

subjs fetches javascript files from a list of URLS or subdomains. Analyzing javascript files can help you find undocumented endpoints, secrets, and more.

It's recommended to pair this with gau and then https://github.com/GerbenJavado/LinkFinder

Resources

• Usage
• Installation
• Changes By Me
• Output Difference

Usage:

Examples:

$ cat urls.txt | subjs 
$ subjs -i urls.txt
$ cat hosts.txt | gau | subjs

To display the help for the tool use the -h flag:

$ subjs -h

Flag	Description	Example
-c	Number of concurrent workers	subjs -c 40
-i	Input file containing URLS	subjs -i urls.txt
-t	Timeout (in seconds) for http client (default 15)	subjs -t 20
-ua	User-Agent to send in requests	subjs -ua "Chrome..."
-version	Show version number	subjs -version"

Installation

From Source:

$ GO111MODULE=on go get -u -v github.com/virenpawar/subjs@vlatest

From Binary:

You can download the pre-built binaries from the releases page and then move them into your $PATH.

$ tar xvf subjs-1.0.2.tar.gz
$ mv subjs /usr/bin/subjs

Changes By Me

• Removed unnecessary "subjs" user-agent which was by default.
• Added regex to filter and find more js files.

Output Difference

• lc's subjs

$ time echo "https://www.paytm.com" | subjs
https://d25w45cltkdr4r.cloudfront.net/config.min.js

real    0m0.766s
user    0m0.035s
sys     0m0.021s

• viren's subjs

$ time echo "https://www.paytm.com" | subjs
https://d25w45cltkdr4r.cloudfront.net/config.min.js
https://assetscdn1.paytm.com/dexter/manifest.0cb98b7357bcd3ae89e8.js
https://assetscdn1.paytm.com/dexter/vendor.a9be4500da9059f928cd.js
https://assetscdn1.paytm.com/dexter/common.f2f7e37e1d39a790898a.js
https://assetscdn1.paytm.com/dexter/main.c49180d08229690a61aa.js

real    0m0.993s
user    0m0.115s
sys     0m0.053s

Useful / Suggestions?

• Feel free to ping me on Twitter.

Once again thanks to Corben Leo for his efforts and his amazing tools.