3 min read
|
Saved February 14, 2026
|
Copied!
Do you care about this?
JS Analyzer is a Burp Suite extension that helps identify API endpoints, secrets, and sensitive URLs in JavaScript files. It filters out irrelevant data for more accurate results and allows for real-time analysis and export of findings.
If you do, here's more
JS Analyzer is a Burp Suite extension designed for JavaScript static analysis. It focuses on extracting useful data from JavaScript files, including API endpoints, URLs, secrets, email addresses, and references to sensitive files. The extension emphasizes reducing noise, which enhances the accuracy of its findings. Key features include endpoint detection for various API paths, URL extraction from cloud storage services, and secret scanning for sensitive information like API keys and tokens. It can also identify email addresses and detect references to file types that might contain sensitive data, such as SQL or CSV files.
The extension employs smart filtering methods to eliminate irrelevant data from its analysis. It filters out XML namespaces, module imports, and internal paths from PDFs, among other noise sources. Users can conduct real-time searches, copy findings directly to the clipboard, and export results in JSON format. The setup process involves adding the extension through Burp Suite settings and can analyze multiple requests simultaneously.
For developers, JS Analyzer can be integrated into Python projects. The article provides code snippets showing how to use the JSAnalyzerEngine class to analyze JavaScript content and return structured results. Contributions to the project are encouraged, including adding new detection patterns and improving existing features. The project operates under the MIT License and aims to serve the InfoSec and tech communities.
Questions about this article
No questions yet.