Recon Tool

JS Endpoint Extractor

Parse JavaScript files to extract hidden API endpoints, internal URLs, and relative paths using static analysis.

* Localhost and internal network IP addresses are restricted for security reasons.

How This Tool Works

1

Input Delivery

You can either provide a direct URL to a JavaScript file, or paste the raw JS code. The backend fetches the URL strictly blocking local IPs to prevent SSRF vulnerabilities.

2

Static Analysis & Regex Parsing

The tool runs an advanced set of Regular Expressions over the code. This is similar to how bug bounty tools like LinkFinder work to extract strings that look like relative paths or full URLs.

3

Deduplication & Extraction

Extracted endpoints are filtered to remove false positives, deduplicated, and sorted. You are presented with a clean list categorized into absolute URLs and relative Paths.